# Flog Txt Version 1
# Analyzer Version: 3.0.2
# Analyzer Build Date: Jun  6 2019 12:21:16
# Log Creation Date: 26.06.2019 06:09:59.762

Process:
	id = "1"
	image_name = "demo.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\demo.exe"
	page_root = "0x4e8c7000"
	os_pid = "0x9f0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\demo.exe\" "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0x9f4

	[0030.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0xd9ee9370, dwHighDateTime=0x1d52be5)) 
	[0030.108] GetCurrentThreadId () returned 0x9f4
	[0030.108] GetCurrentProcessId () returned 0x9f0
	[0030.108] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=15026774663) returned 1
	[0030.109] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\demo.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) 
	[0030.109] GetProcessHeap () returned 0x5350000
	[0030.111] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0030.111] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b
	[0030.111] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f
	[0030.111] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252
	[0030.111] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208
	[0030.111] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28
	[0030.111] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b
	[0030.111] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195
	[0030.111] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f
	[0030.111] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e
	[0030.111] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c
	[0030.111] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751
	[0030.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1
	[0030.113] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1
	[0030.113] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1
	[0030.113] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1
	[0030.113] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0
	[0030.113] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0
	[0030.113] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0
	[0030.113] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0
	[0030.113] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x3bc) returned 0x5363ea0
	[0030.114] GetCurrentThreadId () returned 0x9f4
	[0030.114] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x18) returned 0x5360c88
	[0030.114] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x800) returned 0x5364268
	[0030.114] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\demo.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x406cd0, hStdOutput=0xa791daa9, hStdError=0x0)) 
	[0030.114] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0030.114] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0030.114] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0030.114] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\demo.exe\" "
	[0030.114] GetEnvironmentStringsW () returned 0x5364a70*
	[0030.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381
	[0030.114] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x565) returned 0x5365548
	[0030.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x5365548, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381
	[0030.114] FreeEnvironmentStringsW (penv=0x5364a70) returned 1
	[0030.114] GetLastError () returned 0x7f
	[0030.114] SetLastError (dwErrCode=0x7f) 
	[0030.114] GetLastError () returned 0x7f
	[0030.114] SetLastError (dwErrCode=0x7f) 
	[0030.115] GetLastError () returned 0x7f
	[0030.115] SetLastError (dwErrCode=0x7f) 
	[0030.115] GetACP () returned 0x4e4
	[0030.115] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x220) returned 0x5365ab8
	[0030.115] GetLastError () returned 0x7f
	[0030.115] SetLastError (dwErrCode=0x7f) 
	[0030.115] IsValidCodePage (CodePage=0x4e4) returned 1
	[0030.115] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1
	[0030.115] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1
	[0030.115] GetLastError () returned 0x7f
	[0030.115] SetLastError (dwErrCode=0x7f) 
	[0030.115] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0030.115] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0030.115] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1
	[0030.115] GetLastError () returned 0x7f
	[0030.115] SetLastError (dwErrCode=0x7f) 
	[0030.115] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0030.115] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0030.116] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0030.116] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256
	[0030.116] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x29\xdb\x91\xa7\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256
	[0030.116] GetLastError () returned 0x7f
	[0030.116] SetLastError (dwErrCode=0x7f) 
	[0030.117] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0030.117] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0030.117] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0030.117] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256
	[0030.117] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x29\xdb\x91\xa7\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256
	[0030.117] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x44cdd0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\demo.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\demo.exe")) returned 0x2e
	[0030.117] GetLastError () returned 0x0
	[0030.117] SetLastError (dwErrCode=0x0) 
	[0030.117] GetLastError () returned 0x0
	[0030.117] SetLastError (dwErrCode=0x0) 
	[0030.117] GetLastError () returned 0x0
	[0030.117] SetLastError (dwErrCode=0x0) 
	[0030.117] GetLastError () returned 0x0
	[0030.117] SetLastError (dwErrCode=0x0) 
	[0030.117] GetLastError () returned 0x0
	[0030.117] SetLastError (dwErrCode=0x0) 
	[0030.117] GetLastError () returned 0x0
	[0030.117] SetLastError (dwErrCode=0x0) 
	[0030.117] GetLastError () returned 0x0
	[0030.117] SetLastError (dwErrCode=0x0) 
	[0030.117] GetLastError () returned 0x0
	[0030.117] SetLastError (dwErrCode=0x0) 
	[0030.117] GetLastError () returned 0x0
	[0030.117] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.118] GetLastError () returned 0x0
	[0030.118] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.119] SetLastError (dwErrCode=0x0) 
	[0030.119] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x37) returned 0x5360ca8
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.120] SetLastError (dwErrCode=0x0) 
	[0030.120] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.121] SetLastError (dwErrCode=0x0) 
	[0030.121] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.122] SetLastError (dwErrCode=0x0) 
	[0030.122] GetLastError () returned 0x0
	[0030.123] SetLastError (dwErrCode=0x0) 
	[0030.123] GetLastError () returned 0x0
	[0030.123] SetLastError (dwErrCode=0x0) 
	[0030.123] GetLastError () returned 0x0
	[0030.123] SetLastError (dwErrCode=0x0) 
	[0030.123] GetLastError () returned 0x0
	[0030.123] SetLastError (dwErrCode=0x0) 
	[0030.123] GetLastError () returned 0x0
	[0030.123] SetLastError (dwErrCode=0x0) 
	[0030.123] GetLastError () returned 0x0
	[0030.123] SetLastError (dwErrCode=0x0) 
	[0030.123] GetLastError () returned 0x0
	[0030.123] SetLastError (dwErrCode=0x0) 
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x98) returned 0x5360ce8
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x1f) returned 0x5363938
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x36) returned 0x5360d88
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x37) returned 0x5360dc8
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x3c) returned 0x5365ce0
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x31) returned 0x5365d28
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x17) returned 0x5365d68
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x24) returned 0x5365d88
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x14) returned 0x5365db8
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0xd) returned 0x535f068
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x25) returned 0x5365dd8
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x39) returned 0x5365e08
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x18) returned 0x5365e50
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x17) returned 0x5365e70
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0xe) returned 0x535f080
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x69) returned 0x5365e90
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x3e) returned 0x5365f08
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x1b) returned 0x5363960
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x1d) returned 0x5363988
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x48) returned 0x5365f50
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x12) returned 0x5365fa0
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x18) returned 0x5365fc0
	[0030.123] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x1b) returned 0x53639b0
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x24) returned 0x5364a70
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x29) returned 0x5364aa0
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x1e) returned 0x53639d8
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x41) returned 0x5364ad8
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x17) returned 0x5364b28
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0xf) returned 0x535f098
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x16) returned 0x5364b48
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x2a) returned 0x5364b68
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x29) returned 0x5364ba0
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x15) returned 0x5364bd8
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x1e) returned 0x5363a00
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x2a) returned 0x5364bf8
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x12) returned 0x5364c30
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x18) returned 0x5364c50
	[0030.124] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x46) returned 0x5364c70
	[0030.124] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x5365548 | out: hHeap=0x5350000) returned 1
	[0030.125] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x80) returned 0x5364cc0
	[0030.125] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0030.125] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x800) returned 0x5364d48
	[0030.125] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x406836) returned 0x0
	[0030.125] RtlSizeHeap (HeapHandle=0x5350000, Flags=0x0, MemoryPointer=0x5364cc0) returned 0x80
	[0030.126] RtlSizeHeap (HeapHandle=0x5350000, Flags=0x0, MemoryPointer=0x5364cc0) returned 0x80
	[0030.126] RtlSizeHeap (HeapHandle=0x5350000, Flags=0x0, MemoryPointer=0x5364cc0) returned 0x80
	[0030.126] RtlSizeHeap (HeapHandle=0x5350000, Flags=0x0, MemoryPointer=0x5364cc0) returned 0x80
	[0030.126] GetLastError () returned 0x0
	[0030.126] SetLastError (dwErrCode=0x0) 
	[0030.126] GetLastError () returned 0x0
	[0030.126] SetLastError (dwErrCode=0x0) 
	[0030.126] GetLastError () returned 0x0
	[0030.126] SetLastError (dwErrCode=0x0) 
	[0030.126] GetLastError () returned 0x0
	[0030.126] SetLastError (dwErrCode=0x0) 
	[0030.126] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.127] GetLastError () returned 0x0
	[0030.127] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.128] GetLastError () returned 0x0
	[0030.128] SetLastError (dwErrCode=0x0) 
	[0030.129] GetLastError () returned 0x0
	[0030.129] SetLastError (dwErrCode=0x0) 
	[0030.129] GetLastError () returned 0x0
	[0030.129] SetLastError (dwErrCode=0x0) 
	[0030.129] GetLastError () returned 0x0
	[0030.129] SetLastError (dwErrCode=0x0) 
	[0030.129] GetLastError () returned 0x0
	[0030.129] SetLastError (dwErrCode=0x0) 
	[0030.129] GetLastError () returned 0x0
	[0030.129] SetLastError (dwErrCode=0x0) 
	[0030.129] GetLastError () returned 0x0
	[0030.129] SetLastError (dwErrCode=0x0) 
	[0030.129] GetLastError () returned 0x0
	[0030.129] SetLastError (dwErrCode=0x0) 
	[0030.129] GetLastError () returned 0x0
	[0030.129] SetLastError (dwErrCode=0x0) 
	[0030.129] GetLastError () returned 0x0
	[0030.129] SetLastError (dwErrCode=0x0) 
	[0030.129] GetLastError () returned 0x0
	[0030.129] SetLastError (dwErrCode=0x0) 
	[0030.129] GetLastError () returned 0x0
	[0030.129] SetLastError (dwErrCode=0x0) 
	[0030.129] GetLastError () returned 0x0
	[0030.129] SetLastError (dwErrCode=0x0) 
	[0030.129] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x58
	[0030.132] LocalAlloc (uFlags=0x0, uBytes=0x1c1ec) returned 0x5365fe8
	[0030.132] lstrlenA (lpString="") returned 0
	[0030.132] GetLastError () returned 0x0
	[0030.132] GetTickCount () returned 0x18bab
	[0030.132] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.132] GetLastError () returned 0x5b5
	[0030.132] GetTickCount () returned 0x18bab
	[0030.132] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.132] GetLastError () returned 0x5b5
	[0030.132] GetTickCount () returned 0x18bab
	[0030.132] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.132] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.133] GetTickCount () returned 0x18bab
	[0030.133] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.133] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.134] GetLastError () returned 0x5b5
	[0030.134] GetTickCount () returned 0x18bab
	[0030.134] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.135] GetLastError () returned 0x5b5
	[0030.135] GetTickCount () returned 0x18bab
	[0030.135] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.136] GetLastError () returned 0x5b5
	[0030.136] GetTickCount () returned 0x18bab
	[0030.136] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.137] GetLastError () returned 0x5b5
	[0030.137] GetTickCount () returned 0x18bab
	[0030.137] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.138] GetLastError () returned 0x5b5
	[0030.138] GetTickCount () returned 0x18bab
	[0030.138] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.139] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.139] GetLastError () returned 0x5b5
	[0030.139] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.140] GetTickCount () returned 0x18bab
	[0030.140] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.140] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.141] GetLastError () returned 0x5b5
	[0030.141] GetTickCount () returned 0x18bab
	[0030.141] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.142] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.142] GetLastError () returned 0x5b5
	[0030.142] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.143] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.143] GetLastError () returned 0x5b5
	[0030.143] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.144] GetTickCount () returned 0x18bab
	[0030.144] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.144] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.145] GetLastError () returned 0x5b5
	[0030.145] GetTickCount () returned 0x18bab
	[0030.145] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.146] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.146] GetLastError () returned 0x5b5
	[0030.146] GetTickCount () returned 0x18bab
	[0030.147] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.147] GetLastError () returned 0x5b5
	[0030.147] GetTickCount () returned 0x18bab
	[0030.147] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.147] GetLastError () returned 0x5b5
	[0030.147] GetTickCount () returned 0x18bab
	[0030.147] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.147] GetLastError () returned 0x5b5
	[0030.147] GetTickCount () returned 0x18bab
	[0030.147] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.147] GetLastError () returned 0x5b5
	[0030.147] GetTickCount () returned 0x18bab
	[0030.147] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.147] GetLastError () returned 0x5b5
	[0030.147] GetTickCount () returned 0x18bab
	[0030.147] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.147] GetLastError () returned 0x5b5
	[0030.147] GetTickCount () returned 0x18bab
	[0030.147] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.147] GetLastError () returned 0x5b5
	[0030.147] GetTickCount () returned 0x18bab
	[0030.147] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.147] GetLastError () returned 0x5b5
	[0030.147] GetTickCount () returned 0x18bbb
	[0030.147] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.147] GetLastError () returned 0x5b5
	[0030.147] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.148] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.148] GetLastError () returned 0x5b5
	[0030.148] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.149] GetLastError () returned 0x5b5
	[0030.149] GetTickCount () returned 0x18bbb
	[0030.149] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18e6e4 | out: lpmi=0x18e6e4) returned 0
	[0030.185] LocalAlloc (uFlags=0x0, uBytes=0x1c1ec) returned 0x53821e0
	[0030.186] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.186] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.186] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.186] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.186] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.186] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.186] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.186] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.187] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.187] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.187] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.187] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.187] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.187] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.187] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.187] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.187] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.187] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.187] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.187] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.187] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.187] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.187] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.187] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.187] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.187] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.187] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.187] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.187] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.188] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.188] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.188] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.188] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.188] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.188] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.188] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.188] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.188] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.188] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.188] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.188] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.188] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.188] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.188] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.188] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.188] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.188] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.188] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.188] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.188] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.189] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.189] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.189] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.189] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.189] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.189] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.189] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.189] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.189] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.189] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.189] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.189] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.189] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.189] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.189] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.189] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.189] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.189] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.189] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.189] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.189] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.190] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.190] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.190] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.190] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.190] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.190] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.190] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.190] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.190] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.190] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.190] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.190] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.190] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.190] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.190] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.190] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.190] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.190] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.190] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.190] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.190] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.190] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.191] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.191] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.191] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.191] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.191] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.191] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.191] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.191] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.191] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.191] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.191] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.191] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.191] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.191] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.191] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.191] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.191] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.191] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.191] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.191] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.192] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.192] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.192] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.192] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.192] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.192] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.192] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.192] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.192] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.192] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.192] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.192] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.192] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.192] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.192] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.192] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.192] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.192] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.192] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.192] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.192] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.193] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.193] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.193] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.193] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.193] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.193] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.193] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.193] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.193] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.193] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.193] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.193] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.193] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.193] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.193] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.193] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.193] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.193] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.193] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.193] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.194] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.194] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.194] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.194] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.194] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.194] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.194] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.194] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.194] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.194] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.194] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.194] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.194] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.194] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.194] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.194] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.194] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.194] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.194] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.194] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.194] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.195] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.195] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.195] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.195] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.195] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.195] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.195] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.195] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.195] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.195] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.195] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.195] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.195] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.195] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.195] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.195] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.195] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.195] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.195] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.195] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.196] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.196] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.196] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.196] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.196] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.196] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.196] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.196] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.196] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.196] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.196] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.196] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.196] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.196] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.196] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.196] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.196] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.196] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.196] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.196] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.196] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.196] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.197] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.197] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.197] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.197] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.197] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.197] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.197] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.197] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.197] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.197] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.197] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.197] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.197] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.197] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.197] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.197] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.197] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.197] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.197] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.197] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.197] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.198] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.198] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.198] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.198] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.198] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.198] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.198] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.198] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.198] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.198] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.198] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.198] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.198] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.198] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.198] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.198] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.198] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.198] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.198] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.198] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.198] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.199] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.199] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.199] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.199] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.199] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.199] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.199] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.199] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.199] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.199] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.199] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.199] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.199] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.199] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.199] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.199] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.199] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.199] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.199] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.199] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.199] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.200] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.200] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.200] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.200] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.200] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.200] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.200] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.200] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.200] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.200] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.200] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.200] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.200] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.200] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.200] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.200] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.200] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.200] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.200] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.200] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.200] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.201] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.201] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.201] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.201] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.201] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.201] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.201] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.201] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.201] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.201] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.201] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.201] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.201] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.201] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.201] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.201] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.201] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.201] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.201] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.201] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.201] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.202] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.202] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.202] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.202] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.202] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.202] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.202] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.202] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.202] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.202] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.202] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.202] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.202] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.202] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.202] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.202] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.202] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.202] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.202] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.202] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.202] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.203] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.203] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.203] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.203] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.203] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.203] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.203] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.203] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.203] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.203] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.203] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.203] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.203] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.203] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.203] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.203] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.203] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.203] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.203] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.203] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.203] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.204] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.204] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.204] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.204] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.204] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.204] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.204] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.204] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.204] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.204] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.204] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.204] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.204] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.204] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.204] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.204] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.204] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.204] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.204] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.204] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.204] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.205] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.205] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.205] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.205] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.205] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.205] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.205] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.205] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.205] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.205] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.205] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.205] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.205] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.205] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.205] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.205] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.205] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.205] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.205] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.205] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.205] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.205] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.206] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.206] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.206] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.206] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.206] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.206] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.206] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.206] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.206] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.206] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.206] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.206] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.206] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.206] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.206] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.206] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.206] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.206] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.206] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.206] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.206] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.207] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.207] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.207] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.207] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.207] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.207] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.207] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.207] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.207] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.207] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.207] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.207] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.207] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.207] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.207] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.207] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.207] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.207] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.207] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.207] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.207] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.208] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.208] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.208] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.208] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.208] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.208] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.208] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.208] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.208] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.208] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.208] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.208] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.208] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.208] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.208] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.208] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.208] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.208] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.208] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.208] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.209] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.209] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.209] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.209] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.209] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.209] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.209] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.209] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.209] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.209] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.209] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.209] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.218] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.218] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.218] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.218] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.218] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.218] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.218] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.218] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.218] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.218] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.218] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.218] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.218] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.218] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.219] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.219] GetFileSecurityW (in: lpFileName="Lodo zajokasibe kigofa rofokumi", RequestedInformation=0x0, pSecurityDescriptor=0x18e264, nLength=0x0, lpnLengthNeeded=0x18e260 | out: pSecurityDescriptor=0x18e264, lpnLengthNeeded=0x18e260) returned 0
	[0030.219] DebugActiveProcessStop (dwProcessId=0x0) returned 0
	[0030.275] VirtualProtect (in: lpAddress=0x53821e0, dwSize=0x15171, flNewProtect=0x40, lpflOldProtect=0x18e694 | out: lpflOldProtect=0x18e694*=0x4) returned 1
	[0030.283] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000
	[0030.283] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e
	[0030.283] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0
	[0030.283] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff
	[0030.283] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f
	[0030.283] GetProcAddress (hModule=0x76c20000, lpProcName="Module32First") returned 0x76cb5cd9
	[0030.284] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410
	[0030.284] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x5c
	[0030.286] Module32First (hSnapshot=0x5c, lpme=0x18fcbc) returned 1
	[0030.301] CloseHandle (hObject=0x5c) returned 1
	[0030.301] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7
	[0030.301] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000
	[0030.301] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856
	[0030.301] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f
	[0030.301] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e
	[0030.301] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519
	[0030.302] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802
	[0030.302] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10
	[0030.302] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00
	[0030.302] SetErrorMode (uMode=0x400) returned 0x0
	[0030.302] SetErrorMode (uMode=0x0) returned 0x400
	[0030.302] GetVersionExA (in: lpVersionInformation=0x18ee40*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18ee40*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0030.302] VirtualAlloc (lpAddress=0x0, dwSize=0x17200, flAllocationType=0x1000, flProtect=0x4) returned 0x210000
	[0030.304] VirtualProtect (in: lpAddress=0x400000, dwSize=0x19000, flNewProtect=0x40, lpflOldProtect=0x18fec8 | out: lpflOldProtect=0x18fec8*=0x2) returned 1
	[0030.308] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0030.309] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000
	[0030.309] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222
	[0030.309] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7
	[0030.309] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136
	[0030.309] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916
	[0030.309] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270
	[0030.309] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0
	[0030.309] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0
	[0030.309] GetProcAddress (hModule=0x76c20000, lpProcName="ReleaseMutex") returned 0x76c3111e
	[0030.309] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410
	[0030.309] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749f0000
	[0030.485] GetProcAddress (hModule=0x749f0000, lpProcName="atexit") returned 0x74a0c544
	[0030.485] atexit (param_1=0x53859cf) returned 0
	[0030.485] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000
	[0030.485] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222
	[0030.485] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0
	[0030.485] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileAttributesW") returned 0x76c31b18
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameA") returned 0x76c4b6e0
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexW") returned 0x76c3424c
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136
	[0030.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="OpenMutexW") returned 0x76c35151
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForMultipleObjects") returned 0x76c34220
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpiW") returned 0x76c4d5cd
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpiA") returned 0x76c33e8e
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5
	[0030.487] GetProcAddress (hModule=0x76c20000, lpProcName="ReleaseMutex") returned 0x76c3111e
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="ExpandEnvironmentStringsW") returned 0x76c34173
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceFrequency") returned 0x76c341f0
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileAttributesW") returned 0x76c4d4f7
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="GetVolumeInformationW") returned 0x76c4c860
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435
	[0030.488] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="CreatePipe") returned 0x76cb415b
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="SetHandleInformation") returned 0x76c4195c
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringA") returned 0x76c33c5a
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTime") returned 0x76c35a96
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="SystemTimeToFileTime") returned 0x76c35a7e
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f
	[0030.489] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c
	[0030.490] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf
	[0030.490] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0030.490] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d
	[0030.490] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad
	[0030.490] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6
	[0030.490] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d
	[0030.490] GetProcAddress (hModule=0x74d40000, lpProcName="OpenProcessToken") returned 0x74d54304
	[0030.490] GetProcAddress (hModule=0x74d40000, lpProcName="GetTokenInformation") returned 0x74d5431c
	[0030.490] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64
	[0030.490] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c
	[0030.490] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c
	[0030.491] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144
	[0030.491] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86
	[0030.491] GetProcAddress (hModule=0x74d40000, lpProcName="EnumDependentServicesW") returned 0x74d41e3a
	[0030.491] GetProcAddress (hModule=0x74d40000, lpProcName="EnumServicesStatusExW") returned 0x74d4b466
	[0030.491] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74f40000
	[0030.491] GetProcAddress (hModule=0x74f40000, lpProcName="SystemParametersInfoW") returned 0x74f590d3
	[0030.491] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x75fd0000
	[0032.395] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46
	[0032.395] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77130000
	[0032.396] GetProcAddress (hModule=0x77130000, lpProcName="NtQuerySystemInformation") returned 0x7714fda0
	[0032.396] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x749d0000
	[0032.478] GetProcAddress (hModule=0x749d0000, lpProcName="WNetCloseEnum") returned 0x749d2dd6
	[0032.478] GetProcAddress (hModule=0x749d0000, lpProcName="WNetOpenEnumW") returned 0x749d2f06
	[0032.478] GetProcAddress (hModule=0x749d0000, lpProcName="WNetEnumResourceW") returned 0x749d3058
	[0032.478] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x75bc0000
	[0032.722] GetProcAddress (hModule=0x75bc0000, lpProcName="WSAStartup") returned 0x75bc3ab2
	[0032.722] GetProcAddress (hModule=0x75bc0000, lpProcName="socket") returned 0x75bc3eb8
	[0032.722] GetProcAddress (hModule=0x75bc0000, lpProcName="send") returned 0x75bc6f01
	[0032.722] GetProcAddress (hModule=0x75bc0000, lpProcName="recv") returned 0x75bc6b0e
	[0032.722] GetProcAddress (hModule=0x75bc0000, lpProcName="connect") returned 0x75bc6bdd
	[0032.722] GetProcAddress (hModule=0x75bc0000, lpProcName="closesocket") returned 0x75bc3918
	[0032.722] GetProcAddress (hModule=0x75bc0000, lpProcName="gethostbyname") returned 0x75bd7673
	[0032.722] GetProcAddress (hModule=0x75bc0000, lpProcName="inet_addr") returned 0x75bc311b
	[0032.722] GetProcAddress (hModule=0x75bc0000, lpProcName="ntohl") returned 0x75bc2d57
	[0032.722] GetProcAddress (hModule=0x75bc0000, lpProcName="htonl") returned 0x75bc2d57
	[0032.723] GetProcAddress (hModule=0x75bc0000, lpProcName="htons") returned 0x75bc2d8b
	[0032.723] GetProcessHeap () returned 0x5350000
	[0032.723] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x20) returned 0x53a3e00
	[0032.723] QueryPerformanceCounter (in: lpPerformanceCount=0x18fd18 | out: lpPerformanceCount=0x18fd18*=15288198964) returned 1
	[0032.723] GetTickCount () returned 0x18cf3
	[0032.723] GetCurrentProcessId () returned 0x9f0
	[0032.724] GetTickCount () returned 0x18cf3
	[0032.724] GetTickCount () returned 0x18cf3
	[0032.724] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x20) returned 0x53a3e28
	[0032.724] GetVersion () returned 0x1db10106
	[0032.724] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x7) returned 0x53659e8
	[0032.724] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a4600
	[0032.724] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a4600, Size=0x20) returned 0x53a3e78
	[0032.724] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a3e78, Size=0x40) returned 0x53a24c8
	[0032.724] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53a4928
	[0032.724] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_17G9M5A") returned 0x0
	[0032.724] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_17G9M5A") returned 0x88
	[0032.725] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53659e8 | out: hHeap=0x5350000) returned 1
	[0032.725] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0032.725] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a24c8 | out: hHeap=0x5350000) returned 1
	[0032.725] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x7) returned 0x53659e8
	[0032.725] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a4600
	[0032.725] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a4600, Size=0x20) returned 0x53a3e78
	[0032.725] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a3e78, Size=0x40) returned 0x53a24c8
	[0032.725] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53b4930
	[0032.725] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_17G9M5U") returned 0x0
	[0032.725] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_17G9M5U") returned 0x8c
	[0032.725] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53659e8 | out: hHeap=0x5350000) returned 1
	[0032.725] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0032.725] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a24c8 | out: hHeap=0x5350000) returned 1
	[0032.725] GetVersion () returned 0x1db10106
	[0032.725] GetCurrentProcess () returned 0xffffffff
	[0032.725] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fd04 | out: TokenHandle=0x18fd04*=0x90) returned 1
	[0032.726] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x14, TokenInformation=0x18fd00, TokenInformationLength=0x4, ReturnLength=0x18fd0c | out: TokenInformation=0x18fd00, ReturnLength=0x18fd0c) returned 1
	[0032.726] CloseHandle (hObject=0x90) returned 1
	[0032.726] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x0) returned 0x0
	[0032.726] WaitForSingleObject (hHandle=0x88, dwMilliseconds=0x3e8) returned 0x0
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x14) returned 0x53659e8
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a4600
	[0032.726] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a4600, Size=0x20) returned 0x53a3e78
	[0032.726] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a3e78, Size=0x40) returned 0x53a24c8
	[0032.726] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a24c8, Size=0x80) returned 0x53c4938
	[0032.726] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4938, Size=0x100) returned 0x53c4938
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x34) returned 0x53c4a40
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x53a44b8
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x53a44c8
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53a44d8
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53a4600
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x5365a88
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53a4618
	[0032.726] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x5365a88, Size=0x8) returned 0x5365a88
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53a4630
	[0032.726] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x5365a88, Size=0x10) returned 0x5365a88
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53a4648
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53a4660
	[0032.726] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x5365a88, Size=0x20) returned 0x5365a88
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53a4678
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53a4690
	[0032.726] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a44b8, Size=0x8) returned 0x53a44b8
	[0032.726] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a44c8, Size=0x8) returned 0x53a44c8
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c4a80
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53a46a8
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x53c4a90
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53a46c0
	[0032.726] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4a90, Size=0x8) returned 0x53c4a90
	[0032.726] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53a46d8
	[0032.726] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4a90, Size=0x10) returned 0x53c4a90
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53a46f0
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c4aa8
	[0032.727] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4a90, Size=0x20) returned 0x53c4ab8
	[0032.727] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a44b8, Size=0x10) returned 0x53c4a90
	[0032.727] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a44c8, Size=0x10) returned 0x53c4ae0
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53a44b8
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53a4708
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x53a44c8
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53a4720
	[0032.727] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a44c8, Size=0x8) returned 0x53a44c8
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c4af8
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53a4738
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x53c4b08
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53a4750
	[0032.727] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4b08, Size=0x8) returned 0x53c4b08
	[0032.727] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4a90, Size=0x20) returned 0x53c4b18
	[0032.727] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4ae0, Size=0x20) returned 0x53c4b40
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c4ae0
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53a4768
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x53c4a90
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53a4780
	[0032.727] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4a90, Size=0x8) returned 0x53c4a90
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x14) returned 0x53c4b68
	[0032.727] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x14) returned 0x53c4b88
	[0032.727] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0032.727] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c4938 | out: hHeap=0x5350000) returned 1
	[0032.727] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x18fd50 | out: lpWSAData=0x18fd50) returned 0
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a4798
	[0032.737] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a4798, Size=0x20) returned 0x53a4080
	[0032.737] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a4080, Size=0x40) returned 0x53a24c8
	[0032.737] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a24c8, Size=0x80) returned 0x53c4990
	[0032.737] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4990, Size=0x100) returned 0x53c5660
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a4798
	[0032.737] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a4798, Size=0x20) returned 0x53a4080
	[0032.737] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a4080, Size=0x40) returned 0x53a24c8
	[0032.737] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a24c8, Size=0x80) returned 0x53c4990
	[0032.737] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4990, Size=0x100) returned 0x53c5768
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53a4798
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x53c4990
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47b0
	[0032.737] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4990, Size=0x8) returned 0x53c4990
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x14) returned 0x53c4ce8
	[0032.737] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4990, Size=0x10) returned 0x53c4990
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x18) returned 0x53c4d08
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x1a) returned 0x53a4080
	[0032.737] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c4990, Size=0x20) returned 0x53c4990
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x1c) returned 0x53a40a8
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x16) returned 0x53c4d28
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x1a) returned 0x53a40d0
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53a47c8
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x53c49b8
	[0032.737] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40) returned 0x53a24c8
	[0032.738] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c49b8, Size=0x8) returned 0x53c49b8
	[0032.738] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x3c) returned 0x53a2510
	[0032.738] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c49b8, Size=0x10) returned 0x53c49b8
	[0032.738] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x14) returned 0x53c4d48
	[0032.738] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x18) returned 0x53c4d68
	[0032.738] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c49b8, Size=0x20) returned 0x53c49b8
	[0032.738] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x24) returned 0x53c49e0
	[0032.738] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0032.738] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5660 | out: hHeap=0x5350000) returned 1
	[0032.738] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0032.738] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5768 | out: hHeap=0x5350000) returned 1
	[0032.738] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53c5d28
	[0032.740] EnumServicesStatusExW (in: hSCManager=0x53c5d28, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fcec, lpServicesReturned=0x18fd04, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x18fcec, lpServicesReturned=0x18fd04, lpResumeHandle=0x0) returned 0
	[0032.741] GetLastError () returned 0xea
	[0032.741] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x11e4) returned 0x53c7d90
	[0032.741] EnumServicesStatusExW (in: hSCManager=0x53c5d28, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x53c7d90, cbBufSize=0x11e4, pcbBytesNeeded=0x18fcec, lpServicesReturned=0x18fd04, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x53c7d90, pcbBytesNeeded=0x18fcec, lpServicesReturned=0x18fd04, lpResumeHandle=0x0) returned 1
	[0032.742] CloseServiceHandle (hSCObject=0x53c5d28) returned 1
	[0032.745] lstrlenW (lpString="Appinfo") returned 7
	[0032.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0032.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0032.745] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0032.745] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0032.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0032.745] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0032.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0032.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0032.745] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0032.745] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0032.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0032.745] lstrlenW (lpString="AudioSrv") returned 8
	[0032.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0032.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0032.745] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0032.745] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0032.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0032.746] lstrlenW (lpString="BFE") returned 3
	[0032.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0032.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0032.746] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0032.746] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0032.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0032.746] lstrlenW (lpString="CryptSvc") returned 8
	[0032.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0032.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0032.746] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0032.746] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0032.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0032.746] lstrlenW (lpString="CscService") returned 10
	[0032.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0032.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0032.746] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0032.746] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0032.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0032.746] lstrlenW (lpString="DcomLaunch") returned 10
	[0032.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0032.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0032.746] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0032.746] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0032.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0032.746] lstrlenW (lpString="Dhcp") returned 4
	[0032.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0032.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0032.746] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0032.746] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0032.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0032.746] lstrlenW (lpString="Dnscache") returned 8
	[0032.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0032.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0032.746] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0032.747] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0032.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0032.747] lstrlenW (lpString="DPS") returned 3
	[0032.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0032.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0032.747] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0032.747] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0032.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0032.747] lstrlenW (lpString="eventlog") returned 8
	[0032.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0032.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0032.747] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0032.747] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0032.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0032.747] lstrlenW (lpString="EventSystem") returned 11
	[0032.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0032.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0032.747] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0032.747] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0032.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0032.747] lstrlenW (lpString="gpsvc") returned 5
	[0032.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0032.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0032.747] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0032.747] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0032.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0032.747] lstrlenW (lpString="iphlpsvc") returned 8
	[0032.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0032.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0032.747] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0032.747] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0032.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0032.747] lstrlenW (lpString="LanmanServer") returned 12
	[0032.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0032.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0032.747] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0032.748] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0032.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0032.748] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0032.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0032.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0032.748] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0032.748] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0032.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0032.748] lstrlenW (lpString="lmhosts") returned 7
	[0032.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0032.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0032.748] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0032.748] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0032.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0032.748] lstrlenW (lpString="MMCSS") returned 5
	[0032.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0032.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0032.748] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0032.748] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0032.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0032.748] lstrlenW (lpString="MpsSvc") returned 6
	[0032.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0032.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0032.748] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0032.748] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0032.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0032.748] lstrlenW (lpString="Netman") returned 6
	[0032.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0032.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0032.748] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0032.748] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0032.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0032.748] lstrlenW (lpString="netprofm") returned 8
	[0032.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0032.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0032.748] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0032.749] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0032.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0032.749] lstrlenW (lpString="NlaSvc") returned 6
	[0032.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0032.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0032.749] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0032.749] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0032.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0032.749] lstrlenW (lpString="nsi") returned 3
	[0032.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0032.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0032.749] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0032.749] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0032.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0032.749] lstrlenW (lpString="PcaSvc") returned 6
	[0032.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0032.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0032.749] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0032.749] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0032.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0032.749] lstrlenW (lpString="PlugPlay") returned 8
	[0032.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0032.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0032.749] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0032.749] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0032.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0032.749] lstrlenW (lpString="Power") returned 5
	[0032.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0032.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0032.749] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0032.749] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0032.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0032.749] lstrlenW (lpString="ProfSvc") returned 7
	[0032.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0032.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0032.749] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0032.750] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0032.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0032.750] lstrlenW (lpString="RpcEptMapper") returned 12
	[0032.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0032.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0032.750] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0032.750] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0032.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0032.750] lstrlenW (lpString="RpcSs") returned 5
	[0032.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0032.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0032.750] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0032.750] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0032.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0032.750] lstrlenW (lpString="SamSs") returned 5
	[0032.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0032.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0032.750] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0032.750] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0032.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0032.750] lstrlenW (lpString="Schedule") returned 8
	[0032.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0032.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0032.750] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0032.750] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0032.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0032.750] lstrlenW (lpString="SENS") returned 4
	[0032.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0032.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0032.750] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0032.750] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0032.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0032.750] lstrlenW (lpString="ShellHWDetection") returned 16
	[0032.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0032.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0032.750] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0032.751] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0032.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0032.751] lstrlenW (lpString="Spooler") returned 7
	[0032.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0032.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0032.751] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0032.751] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0032.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0032.751] lstrlenW (lpString="SysMain") returned 7
	[0032.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0032.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0032.751] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0032.751] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0032.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0032.751] lstrlenW (lpString="Themes") returned 6
	[0032.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0032.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0032.751] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0032.751] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0032.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0032.751] lstrlenW (lpString="TrkWks") returned 6
	[0032.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0032.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0032.751] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0032.751] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0032.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0032.751] lstrlenW (lpString="UxSms") returned 5
	[0032.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0032.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0032.751] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0032.751] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0032.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0032.751] lstrlenW (lpString="WdiServiceHost") returned 14
	[0032.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0032.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0032.751] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0032.752] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0032.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0032.752] lstrlenW (lpString="WdiSystemHost") returned 13
	[0032.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0032.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0032.752] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0032.752] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0032.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0032.752] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0032.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0032.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0032.752] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0032.752] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0032.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0032.752] lstrlenW (lpString="Winmgmt") returned 7
	[0032.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0032.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0032.752] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0032.752] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0032.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0032.752] lstrlenW (lpString="WPDBusEnum") returned 10
	[0032.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0032.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0032.752] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0032.752] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0032.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0032.752] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c7d90 | out: hHeap=0x5350000) returned 1
	[0032.752] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe4
	[0032.755] Process32FirstW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0032.756] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0032.757] lstrlenW (lpString="System") returned 6
	[0032.757] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0032.757] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0032.757] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0032.757] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0032.757] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0032.757] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0032.757] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0032.757] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0032.757] lstrlenW (lpString="smss.exe") returned 8
	[0032.757] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0032.757] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0032.757] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0032.757] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0032.757] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0032.757] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0032.757] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0032.758] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0032.758] lstrlenW (lpString="csrss.exe") returned 9
	[0032.758] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0032.758] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0032.758] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0032.758] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0032.758] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0032.758] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0032.758] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0032.758] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0032.759] lstrlenW (lpString="wininit.exe") returned 11
	[0032.759] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0032.759] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0032.759] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0032.759] lstrcmpiW (lpString1="postgres.exe", lpString2="wininit.exe") returned -1
	[0032.759] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="wininit.exe") returned -1
	[0032.759] lstrcmpiW (lpString1="mysqld.exe", lpString2="wininit.exe") returned -1
	[0032.759] lstrcmpiW (lpString1="sqlservr.exe", lpString2="wininit.exe") returned -1
	[0032.759] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0032.760] lstrlenW (lpString="csrss.exe") returned 9
	[0032.760] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0032.760] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0032.760] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0032.760] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0032.760] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0032.760] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0032.760] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0032.760] lstrlenW (lpString="winlogon.exe") returned 12
	[0032.760] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0032.761] lstrlenW (lpString="services.exe") returned 12
	[0032.761] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0032.762] lstrlenW (lpString="lsass.exe") returned 9
	[0032.762] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0032.762] lstrlenW (lpString="lsm.exe") returned 7
	[0032.762] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.763] lstrlenW (lpString="svchost.exe") returned 11
	[0032.763] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.763] lstrlenW (lpString="svchost.exe") returned 11
	[0032.763] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.764] lstrlenW (lpString="svchost.exe") returned 11
	[0032.764] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.764] lstrlenW (lpString="svchost.exe") returned 11
	[0032.764] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.765] lstrlenW (lpString="svchost.exe") returned 11
	[0032.765] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0032.766] lstrlenW (lpString="audiodg.exe") returned 11
	[0032.766] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.766] lstrlenW (lpString="svchost.exe") returned 11
	[0032.766] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.767] lstrlenW (lpString="svchost.exe") returned 11
	[0032.767] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0032.767] lstrlenW (lpString="dwm.exe") returned 7
	[0032.767] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0032.768] lstrlenW (lpString="explorer.exe") returned 12
	[0032.768] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0032.769] lstrlenW (lpString="spoolsv.exe") returned 11
	[0032.769] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0032.769] lstrlenW (lpString="taskhost.exe") returned 12
	[0032.769] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.770] lstrlenW (lpString="svchost.exe") returned 11
	[0032.770] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0032.770] lstrlenW (lpString="taskeng.exe") returned 11
	[0032.771] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0032.771] lstrlenW (lpString="taskhost.exe") returned 12
	[0032.771] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0032.772] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0032.772] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0032.772] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0032.772] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0032.773] lstrlenW (lpString="possibilities.exe") returned 17
	[0032.773] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0032.773] lstrlenW (lpString="wilson.exe") returned 10
	[0032.773] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0032.774] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0032.774] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0032.775] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0032.775] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0032.775] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0032.775] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0032.776] lstrlenW (lpString="crisis.exe") returned 10
	[0032.776] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0032.776] lstrlenW (lpString="dramatically.exe") returned 16
	[0032.776] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0032.777] lstrlenW (lpString="rocket.exe") returned 10
	[0032.777] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0032.777] lstrlenW (lpString="warrant.exe") returned 11
	[0032.777] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0032.778] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0032.778] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0032.779] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0032.779] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0032.779] lstrlenW (lpString="israel.exe") returned 10
	[0032.779] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0032.780] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0032.780] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0032.780] lstrlenW (lpString="toxic chain.exe") returned 15
	[0032.780] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0032.781] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0032.781] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0032.781] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0032.781] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0032.782] lstrlenW (lpString="dllhost.exe") returned 11
	[0032.782] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0032.783] lstrlenW (lpString="dllhost.exe") returned 11
	[0032.783] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0032.784] lstrlenW (lpString="demo.exe") returned 8
	[0032.784] Process32NextW (in: hSnapshot=0xe4, lppe=0x18fadc | out: lppe=0x18fadc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 0
	[0032.784] CloseHandle (hObject=0xe4) returned 1
	[0032.784] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a24c8 | out: hHeap=0x5350000) returned 1
	[0032.784] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a2510 | out: hHeap=0x5350000) returned 1
	[0032.784] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c4d48 | out: hHeap=0x5350000) returned 1
	[0032.784] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c4d68 | out: hHeap=0x5350000) returned 1
	[0032.784] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c49e0 | out: hHeap=0x5350000) returned 1
	[0032.784] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a47b0 | out: hHeap=0x5350000) returned 1
	[0032.784] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c4ce8 | out: hHeap=0x5350000) returned 1
	[0032.784] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c4d08 | out: hHeap=0x5350000) returned 1
	[0032.784] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a4080 | out: hHeap=0x5350000) returned 1
	[0032.784] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a40a8 | out: hHeap=0x5350000) returned 1
	[0032.784] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c4d28 | out: hHeap=0x5350000) returned 1
	[0032.784] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a40d0 | out: hHeap=0x5350000) returned 1
	[0032.784] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53c9fe8
	[0032.785] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53d9ff0
	[0032.785] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47b0
	[0032.785] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47b0, Size=0x20) returned 0x53a40d0
	[0032.785] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a40d0, Size=0x40) returned 0x53a2510
	[0032.785] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47b0
	[0032.785] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47b0, Size=0x20) returned 0x53a40d0
	[0032.785] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47b0
	[0032.785] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47b0, Size=0x20) returned 0x53a40a8
	[0032.785] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47b0
	[0032.785] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47b0, Size=0x20) returned 0x53a4080
	[0032.785] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a4080, Size=0x40) returned 0x53a24c8
	[0032.785] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x53d9ff0, nSize=0x7fff | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\demo.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\demo.exe")) returned 0x2e
	[0032.786] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53e9ff8
	[0032.786] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53fa000
	[0032.786] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47b0
	[0032.786] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47b0, Size=0x20) returned 0x53a4080
	[0032.786] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a4080, Size=0x40) returned 0x53a2630
	[0032.786] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2630, Size=0x80) returned 0x53c6750
	[0032.786] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c6750, Size=0x100) returned 0x53c6750
	[0032.786] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0032.786] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6750 | out: hHeap=0x5350000) returned 1
	[0032.786] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\System32\\demo.exe", lpDst=0x53e9ff8, nSize=0x7fff | out: lpDst="C:\\Windows\\System32\\demo.exe") returned 0x1d
	[0032.786] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53fa000 | out: hHeap=0x5350000) returned 1
	[0032.786] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e9ff8 | out: hHeap=0x5350000) returned 1
	[0032.786] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x100000) returned 0x7020020
	[0032.787] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47b0
	[0032.787] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47b0, Size=0x20) returned 0x53a4080
	[0032.787] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47b0
	[0032.787] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47b0, Size=0x20) returned 0x53c5d78
	[0032.787] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0032.787] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0032.787] Wow64DisableWow64FsRedirection (in: OldValue=0x18fcfc | out: OldValue=0x18fcfc*=0x0) returned 1
	[0032.787] lstrlenW (lpString="kernel32.dll") returned 12
	[0032.787] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a4080 | out: hHeap=0x5350000) returned 1
	[0032.787] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0032.787] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5d78 | out: hHeap=0x5350000) returned 1
	[0032.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\demo.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\demo.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe4
	[0032.787] CreateFileW (lpFileName="C:\\Windows\\System32\\demo.exe" (normalized: "c:\\windows\\system32\\demo.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe8
	[0032.788] ReadFile (in: hFile=0xe4, lpBuffer=0x7020020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x18fcf8, lpOverlapped=0x0 | out: lpBuffer=0x7020020*, lpNumberOfBytesRead=0x18fcf8*=0x50000, lpOverlapped=0x0) returned 1
	[0032.803] WriteFile (in: hFile=0xe8, lpBuffer=0x7020020*, nNumberOfBytesToWrite=0x50000, lpNumberOfBytesWritten=0x18fcf8, lpOverlapped=0x0 | out: lpBuffer=0x7020020*, lpNumberOfBytesWritten=0x18fcf8*=0x50000, lpOverlapped=0x0) returned 1
	[0032.809] ReadFile (in: hFile=0xe4, lpBuffer=0x7020020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x18fcf8, lpOverlapped=0x0 | out: lpBuffer=0x7020020*, lpNumberOfBytesRead=0x18fcf8*=0x0, lpOverlapped=0x0) returned 1
	[0032.809] CloseHandle (hObject=0xe8) returned 1
	[0032.814] CloseHandle (hObject=0xe4) returned 1
	[0032.814] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47b0
	[0032.814] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47b0, Size=0x20) returned 0x53c5d78
	[0032.814] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47b0
	[0032.814] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47b0, Size=0x20) returned 0x53c5d28
	[0032.814] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0032.815] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0032.815] Wow64DisableWow64FsRedirection (in: OldValue=0x18fcfc | out: OldValue=0x18fcfc*=0x1) returned 1
	[0032.815] lstrlenW (lpString="kernel32.dll") returned 12
	[0032.815] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5d28 | out: hHeap=0x5350000) returned 1
	[0032.815] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0032.815] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5d78 | out: hHeap=0x5350000) returned 1
	[0032.815] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x7020020 | out: hHeap=0x5350000) returned 1
	[0032.820] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47b0
	[0032.820] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47b0, Size=0x20) returned 0x53c5d78
	[0032.820] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5d78, Size=0x40) returned 0x53a2630
	[0032.820] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2630, Size=0x80) returned 0x53c6750
	[0032.820] lstrlenW (lpString="C:\\Windows\\System32\\demo.exe") returned 28
	[0032.820] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0032.820] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x5c) returned 0x53c6a38
	[0032.820] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x18fccc | out: phkResult=0x18fccc*=0xe4) returned 0x0
	[0032.820] RegSetValueExW (in: hKey=0xe4, lpValueName="demo.exe", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\System32\\demo.exe", cbData=0x38 | out: lpData="C:\\Windows\\System32\\demo.exe") returned 0x0
	[0032.821] RegCloseKey (hKey=0xe4) returned 0x0
	[0032.821] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6a38 | out: hHeap=0x5350000) returned 1
	[0032.821] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0032.821] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6750 | out: hHeap=0x5350000) returned 1
	[0032.821] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53e9ff8
	[0032.821] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53fa000
	[0032.821] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47b0
	[0032.821] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47b0, Size=0x20) returned 0x53c5d78
	[0032.821] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5d78, Size=0x40) returned 0x53a2630
	[0032.821] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2630, Size=0x80) returned 0x53c6750
	[0032.821] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c6750, Size=0x100) returned 0x53c6750
	[0032.821] lstrlenW (lpString="") returned 0
	[0032.821] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0032.821] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8c) returned 0x53c6858
	[0032.821] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x18fc78 | out: phkResult=0x18fc78*=0xe4) returned 0x0
	[0032.821] RegQueryValueExW (in: hKey=0xe4, lpValueName="Startup", lpReserved=0x0, lpType=0x18fc84, lpData=0x53fa000, lpcbData=0x18fcb0*=0x7fff | out: lpType=0x18fc84*=0x0, lpData=0x53fa000*=0x53, lpcbData=0x18fcb0*=0x7fff) returned 0x2
	[0032.821] RegCloseKey (hKey=0xe4) returned 0x0
	[0032.821] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6858 | out: hHeap=0x5350000) returned 1
	[0032.821] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0032.822] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8c) returned 0x53c6858
	[0032.822] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x18fc78 | out: phkResult=0x18fc78*=0xe8) returned 0x0
	[0032.822] RegQueryValueExW (in: hKey=0xe8, lpValueName="Startup", lpReserved=0x0, lpType=0x18fc84, lpData=0x53fa000, lpcbData=0x18fcb0*=0x7fff | out: lpType=0x18fc84*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x18fcb0*=0x98) returned 0x0
	[0032.822] RegCloseKey (hKey=0xe8) returned 0x0
	[0032.822] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6858 | out: hHeap=0x5350000) returned 1
	[0032.822] lstrlenW (lpString="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 75
	[0032.822] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0032.822] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6750 | out: hHeap=0x5350000) returned 1
	[0032.822] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\demo.exe", lpDst=0x53e9ff8, nSize=0x7fff | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\demo.exe") returned 0x65
	[0032.822] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53fa000 | out: hHeap=0x5350000) returned 1
	[0032.822] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e9ff8 | out: hHeap=0x5350000) returned 1
	[0032.822] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x100000) returned 0x7020020
	[0032.822] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0032.822] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53c5d78
	[0032.822] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0032.822] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53c5d28
	[0032.822] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0032.823] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0032.823] Wow64DisableWow64FsRedirection (in: OldValue=0x18fcfc | out: OldValue=0x18fcfc*=0x1) returned 1
	[0032.823] lstrlenW (lpString="kernel32.dll") returned 12
	[0032.823] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5d78 | out: hHeap=0x5350000) returned 1
	[0032.823] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0032.823] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5d28 | out: hHeap=0x5350000) returned 1
	[0032.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\demo.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\demo.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe8
	[0032.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\demo.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\demo.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xec
	[0032.825] ReadFile (in: hFile=0xe8, lpBuffer=0x7020020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x18fcf8, lpOverlapped=0x0 | out: lpBuffer=0x7020020*, lpNumberOfBytesRead=0x18fcf8*=0x50000, lpOverlapped=0x0) returned 1
	[0032.837] WriteFile (in: hFile=0xec, lpBuffer=0x7020020*, nNumberOfBytesToWrite=0x50000, lpNumberOfBytesWritten=0x18fcf8, lpOverlapped=0x0 | out: lpBuffer=0x7020020*, lpNumberOfBytesWritten=0x18fcf8*=0x50000, lpOverlapped=0x0) returned 1
	[0032.843] ReadFile (in: hFile=0xe8, lpBuffer=0x7020020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x18fcf8, lpOverlapped=0x0 | out: lpBuffer=0x7020020*, lpNumberOfBytesRead=0x18fcf8*=0x0, lpOverlapped=0x0) returned 1
	[0032.843] CloseHandle (hObject=0xec) returned 1
	[0032.848] CloseHandle (hObject=0xe8) returned 1
	[0032.848] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0032.848] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53c5d28
	[0032.848] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0032.848] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53c5d78
	[0032.848] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0032.848] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0032.848] Wow64DisableWow64FsRedirection (in: OldValue=0x18fcfc | out: OldValue=0x18fcfc*=0x1) returned 1
	[0032.848] lstrlenW (lpString="kernel32.dll") returned 12
	[0032.848] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5d78 | out: hHeap=0x5350000) returned 1
	[0032.848] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0032.848] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5d28 | out: hHeap=0x5350000) returned 1
	[0032.848] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x7020020 | out: hHeap=0x5350000) returned 1
	[0032.853] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53e9ff8
	[0032.853] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53fa000
	[0032.853] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0032.853] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53c5d28
	[0032.853] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5d28, Size=0x40) returned 0x53a2630
	[0032.853] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2630, Size=0x80) returned 0x53c6750
	[0032.853] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c6750, Size=0x100) returned 0x53c6750
	[0032.853] lstrlenW (lpString="") returned 0
	[0032.853] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0032.853] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8c) returned 0x53c6858
	[0032.853] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x18fc78 | out: phkResult=0x18fc78*=0xe8) returned 0x0
	[0032.853] RegQueryValueExW (in: hKey=0xe8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x18fc84, lpData=0x53fa000, lpcbData=0x18fcb0*=0x7fff | out: lpType=0x18fc84*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x18fcb0*=0x78) returned 0x0
	[0032.853] RegCloseKey (hKey=0xe8) returned 0x0
	[0032.853] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6858 | out: hHeap=0x5350000) returned 1
	[0032.853] lstrlenW (lpString="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 59
	[0032.853] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0032.854] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6750 | out: hHeap=0x5350000) returned 1
	[0032.854] ExpandEnvironmentStringsW (in: lpSrc="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\demo.exe", lpDst=0x53e9ff8, nSize=0x7fff | out: lpDst="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\demo.exe") returned 0x46
	[0032.854] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53fa000 | out: hHeap=0x5350000) returned 1
	[0032.854] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e9ff8 | out: hHeap=0x5350000) returned 1
	[0032.854] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x100000) returned 0x7020020
	[0032.854] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0032.854] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53c5d28
	[0032.854] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0032.854] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53c5d78
	[0032.854] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0032.854] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0032.854] Wow64DisableWow64FsRedirection (in: OldValue=0x18fcfc | out: OldValue=0x18fcfc*=0x1) returned 1
	[0032.854] lstrlenW (lpString="kernel32.dll") returned 12
	[0032.854] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5d28 | out: hHeap=0x5350000) returned 1
	[0032.854] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0032.854] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5d78 | out: hHeap=0x5350000) returned 1
	[0032.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\demo.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\demo.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe8
	[0032.854] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\demo.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\demo.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xec
	[0032.877] ReadFile (in: hFile=0xe8, lpBuffer=0x7020020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x18fcf8, lpOverlapped=0x0 | out: lpBuffer=0x7020020*, lpNumberOfBytesRead=0x18fcf8*=0x50000, lpOverlapped=0x0) returned 1
	[0032.889] WriteFile (in: hFile=0xec, lpBuffer=0x7020020*, nNumberOfBytesToWrite=0x50000, lpNumberOfBytesWritten=0x18fcf8, lpOverlapped=0x0 | out: lpBuffer=0x7020020*, lpNumberOfBytesWritten=0x18fcf8*=0x50000, lpOverlapped=0x0) returned 1
	[0032.895] ReadFile (in: hFile=0xe8, lpBuffer=0x7020020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x18fcf8, lpOverlapped=0x0 | out: lpBuffer=0x7020020*, lpNumberOfBytesRead=0x18fcf8*=0x0, lpOverlapped=0x0) returned 1
	[0032.895] CloseHandle (hObject=0xec) returned 1
	[0032.898] CloseHandle (hObject=0xe8) returned 1
	[0032.898] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0032.898] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53c5d78
	[0032.898] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0032.898] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53c5d28
	[0032.898] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0032.898] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0032.898] Wow64DisableWow64FsRedirection (in: OldValue=0x18fcfc | out: OldValue=0x18fcfc*=0x1) returned 1
	[0032.898] lstrlenW (lpString="kernel32.dll") returned 12
	[0032.899] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5d28 | out: hHeap=0x5350000) returned 1
	[0032.899] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0032.899] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5d78 | out: hHeap=0x5350000) returned 1
	[0032.899] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x7020020 | out: hHeap=0x5350000) returned 1
	[0032.903] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c9fe8 | out: hHeap=0x5350000) returned 1
	[0032.904] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53d9ff0 | out: hHeap=0x5350000) returned 1
	[0032.904] lstrlenW (lpString="%windir%\\System32") returned 17
	[0032.905] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a2510 | out: hHeap=0x5350000) returned 1
	[0032.905] lstrlenW (lpString="%appdata%") returned 9
	[0032.905] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a40d0 | out: hHeap=0x5350000) returned 1
	[0032.905] lstrlenW (lpString="%sh(Startup)%") returned 13
	[0032.905] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a40a8 | out: hHeap=0x5350000) returned 1
	[0032.905] lstrlenW (lpString="%sh(Common Startup)%") returned 20
	[0032.905] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a24c8 | out: hHeap=0x5350000) returned 1
	[0032.905] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0032.905] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53a40a8
	[0032.905] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a40a8, Size=0x40) returned 0x53a24c8
	[0032.905] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a24c8, Size=0x80) returned 0x53c6750
	[0032.905] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0032.905] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53a40a8
	[0032.905] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x1fffc) returned 0x53c9fe8
	[0032.905] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53e9ff0
	[0032.905] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53f9ff8
	[0032.905] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0032.905] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53a40d0
	[0032.905] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a40d0, Size=0x40) returned 0x53a24c8
	[0032.905] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a24c8, Size=0x80) returned 0x53c67d8
	[0032.905] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c67d8, Size=0x100) returned 0x53c67d8
	[0032.905] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0032.905] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c67d8 | out: hHeap=0x5350000) returned 1
	[0032.905] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x53e9ff0, nSize=0x7fff | out: lpDst="C:\\Windows\\system32\\cmd.exe") returned 0x1c
	[0032.905] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53f9ff8 | out: hHeap=0x5350000) returned 1
	[0032.905] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e9ff0 | out: hHeap=0x5350000) returned 1
	[0032.905] CreatePipe (in: hReadPipe=0x18fcb8, hWritePipe=0x18fcbc, lpPipeAttributes=0x18fca8, nSize=0x0 | out: hReadPipe=0x18fcb8*=0xec, hWritePipe=0x18fcbc*=0xf0) returned 1
	[0032.906] CreatePipe (in: hReadPipe=0x18fd28, hWritePipe=0x18fd2c, lpPipeAttributes=0x18fca8, nSize=0x0 | out: hReadPipe=0x18fd28*=0xf4, hWritePipe=0x18fd2c*=0xf8) returned 1
	[0032.906] SetHandleInformation (hObject=0xf0, dwMask=0x1, dwFlags=0x0) returned 1
	[0032.906] SetHandleInformation (hObject=0xf4, dwMask=0x1, dwFlags=0x0) returned 1
	[0032.906] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fcc8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xec, hStdOutput=0xf8, hStdError=0xf8), lpProcessInformation=0x18fd18 | out: lpCommandLine=0x0, lpProcessInformation=0x18fd18*(hProcess=0x100, hThread=0xfc, dwProcessId=0xa04, dwThreadId=0xa08)) returned 1
	[0032.931] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0032.931] WriteFile (in: hFile=0xf0, lpBuffer=0x53c6750*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x18fcc4, lpOverlapped=0x0 | out: lpBuffer=0x53c6750*, lpNumberOfBytesWritten=0x18fcc4*=0x41, lpOverlapped=0x0) returned 1
	[0032.931] CloseHandle (hObject=0x100) returned 1
	[0032.931] CloseHandle (hObject=0xfc) returned 1
	[0032.931] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c9fe8 | out: hHeap=0x5350000) returned 1
	[0032.931] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0032.931] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6750 | out: hHeap=0x5350000) returned 1
	[0032.931] lstrlenW (lpString="%comspec%") returned 9
	[0032.931] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a40a8 | out: hHeap=0x5350000) returned 1
	[0032.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a530, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc
	[0032.932] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53a47e0
	[0032.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a710, lpParameter=0x53a47e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x100
	[0032.932] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c6670
	[0032.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4098e0, lpParameter=0x53c6670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108
	[0032.933] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47f8
	[0032.933] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47f8, Size=0x20) returned 0x53a40a8
	[0032.933] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a40a8, Size=0x40) returned 0x53a24c8
	[0032.933] lstrlenW (lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZ") returned 26
	[0032.933] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xd0) returned 0x53c7d48
	[0032.933] GetLogicalDrives () returned 0x4
	[0032.933] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10014) returned 0x53c9fe8
	[0032.933] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47f8
	[0032.933] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47f8, Size=0x20) returned 0x53a40a8
	[0032.933] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a40a8, Size=0x40) returned 0x53a2678
	[0032.933] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2678, Size=0x80) returned 0x53c6750
	[0032.933] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c6750, Size=0x100) returned 0x53c7e20
	[0032.933] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c7e20, Size=0x200) returned 0x53c8138
	[0032.933] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8138, Size=0x400) returned 0x53c8138
	[0032.933] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8138, Size=0x800) returned 0x53c8138
	[0032.933] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8138, Size=0x1000) returned 0x53da008
	[0032.933] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x53db010
	[0032.933] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47f8
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53a48d0
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x53c68d8
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53a48e8
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x53c68e8
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53a4900
	[0032.934] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c68e8, Size=0x8) returned 0x53c68e8
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8150
	[0032.934] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c68e8, Size=0x10) returned 0x53c68e8
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8168
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8180
	[0032.934] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c68e8, Size=0x20) returned 0x53c68e8
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8198
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c6750
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xe) returned 0x53c81b0
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xe) returned 0x53c81c8
	[0032.934] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c68e8, Size=0x40) returned 0x53c6760
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xe) returned 0x53c81e0
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xe) returned 0x53c81f8
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xe) returned 0x53c8210
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xe) returned 0x53c8228
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8240
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8258
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c67a8
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8270
	[0032.934] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c6760, Size=0x80) returned 0x53c7e20
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8288
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c82a0
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c82b8
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c82d0
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c82e8
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53c8300
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8318
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c67b8
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8330
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8348
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53c8360
	[0032.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8378
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53c8390
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c83a8
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53c83c0
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c83d8
	[0032.935] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c7e20, Size=0x100) returned 0x53c7e20
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c83f0
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8408
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8420
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53c8438
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8450
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8468
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c67c8
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8480
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8498
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c84b0
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x6) returned 0x53c7f28
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c84c8
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c84e0
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c68e8
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c84f8
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8510
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53c8550
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8568
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8580
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8598
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xe) returned 0x53c85b0
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c85c8
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53c85e0
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c85f8
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8610
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8628
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8640
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c68f8
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8658
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8670
	[0032.935] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8688
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c86a0
	[0032.936] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c7e20, Size=0x200) returned 0x53c8938
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c86b8
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c6908
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c86d0
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c86e8
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8700
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8718
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8730
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8748
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8760
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8778
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8790
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53c87a8
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53c87c0
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c87d8
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c87f0
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53c8808
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53c8820
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8838
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53c8850
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53c8868
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8880
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8898
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c88b0
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c8b58
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c88c8
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c88e0
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c88f8
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c8b68
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53c8910
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53eb030
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb048
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb060
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb078
	[0032.936] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb090
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb0a8
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb0c0
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53eb0d8
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53eb0f0
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb108
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb120
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb138
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53eb150
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb168
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb180
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb198
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb1b0
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb1c8
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb1e0
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb1f8
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c8b78
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x6) returned 0x53c8b88
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb210
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb228
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb240
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb258
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb270
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53eb288
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb2a0
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb2b8
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb2d0
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb2e8
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53eb300
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb318
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb330
	[0032.937] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8938, Size=0x400) returned 0x53eb418
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb348
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb360
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53eb378
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb390
	[0032.937] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb3a8
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb3c0
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53eb3d8
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb3f0
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb838
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb850
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c8b98
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb868
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53eb880
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb898
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb8b0
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb8c8
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb8e0
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xe) returned 0x53eb8f8
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb910
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb928
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb940
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb958
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb970
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb988
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb9a0
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb9b8
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c8ba8
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb9d0
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eb9e8
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eba00
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eba18
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eba30
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eba48
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eba60
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eba78
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53eba90
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xe) returned 0x53ebaa8
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebac0
	[0032.938] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xe) returned 0x53ebad8
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebaf0
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebb08
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebb20
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebb38
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebb50
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ebb68
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebb80
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebb98
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebbb0
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebbc8
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebbe0
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebbf8
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebc38
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebc50
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebc68
	[0032.939] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebc80
	[0033.173] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebd70
	[0033.173] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebd88
	[0033.173] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebd58
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebd10
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebd28
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebd40
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebce0
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53ebcf8
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12) returned 0x53c4f88
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebda0
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebdb8
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebdd0
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebde8
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebe00
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebe18
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebe30
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebe48
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebe60
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebe78
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebe90
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebea8
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebec0
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebed8
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebef0
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebf08
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebf20
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebf38
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebf50
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebf68
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ebf80
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ebf98
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ebfb0
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xe) returned 0x53ebfc8
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ebfe0
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c8bc8
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ebff8
	[0033.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c8bb8
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ed458
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ed470
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ed488
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ed4a0
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ed4b8
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ed4d0
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ed4e8
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ed500
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ed518
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ed530
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ed548
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ed560
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ed578
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ed590
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x8) returned 0x53c8bd8
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ed5a8
	[0033.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xa) returned 0x53ed5c0
	[0033.175] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53eb418, Size=0x800) returned 0x53ed840
	[0033.175] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c68d8, Size=0x8) returned 0x53c68d8
	[0033.175] lstrlenW (lpString=".beets") returned 6
	[0033.175] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53ee360 | out: hHeap=0x5350000) returned 1
	[0033.175] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53ee390, Size=0x20) returned 0x53c5e18
	[0033.175] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5e18, Size=0x40) returned 0x53a2708
	[0033.175] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2708, Size=0x80) returned 0x53ec230
	[0033.175] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8c48, Size=0x8) returned 0x53c8c58
	[0033.176] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8c58, Size=0x10) returned 0x53ee390
	[0033.176] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53ee390, Size=0x20) returned 0x53c5c88
	[0033.176] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53ee3c0, Size=0x20) returned 0x53c5e40
	[0033.176] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5e40, Size=0x40) returned 0x53a2708
	[0033.176] lstrlenW (lpString="RETURN FILES.txt") returned 16
	[0033.176] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53ee3c0, Size=0x20) returned 0x53c5e40
	[0033.176] lstrlenW (lpString="Info.hta") returned 8
	[0033.873] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x53ee448, nSize=0x7fff | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\demo.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\demo.exe")) returned 0x2e
	[0033.875] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53ee448 | out: hHeap=0x5350000) returned 1
	[0033.880] lstrlenW (lpString="demo.exe") returned 8
	[0033.880] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5c88, Size=0x40) returned 0x53a27e0
	[0033.880] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53ee3f0, Size=0x20) returned 0x53c5c88
	[0033.881] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53ee3f0, Size=0x20) returned 0x53c5e68
	[0033.881] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5e68, Size=0x40) returned 0x53a2828
	[0033.881] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2828, Size=0x80) returned 0x53c8a10
	[0033.881] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8a10, Size=0x100) returned 0x53c8a10
	[0033.881] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0033.881] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c8a10 | out: hHeap=0x5350000) returned 1
	[0033.881] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x53ee448, nSize=0x8000 | out: lpDst="C:\\Windows;") returned 0xc
	[0033.881] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x540e5c8 | out: hHeap=0x5350000) returned 1
	[0033.881] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53ee448 | out: hHeap=0x5350000) returned 1
	[0033.881] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8c48, Size=0x8) returned 0x53c8c68
	[0033.881] lstrlenW (lpString="%windir%;") returned 9
	[0033.881] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5c88 | out: hHeap=0x5350000) returned 1
	[0033.881] lstrlenW (lpString="C:\\Windows;") returned 11
	[0033.881] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db010 | out: hHeap=0x5350000) returned 1
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53ee408, Size=0x20) returned 0x53c5c88
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5c88, Size=0x40) returned 0x53a2828
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2828, Size=0x80) returned 0x53c8a10
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8a10, Size=0x100) returned 0x53c8a10
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8c98, Size=0x8) returned 0x53c8ca8
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ca8, Size=0x10) returned 0x53db040
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53db040, Size=0x20) returned 0x53c5c88
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8c48, Size=0x8) returned 0x53c8ca8
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8c78, Size=0x8) returned 0x53c8c48
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8c98, Size=0x8) returned 0x53c8cb8
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8cb8, Size=0x10) returned 0x53db0e8
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53db0e8, Size=0x20) returned 0x53c5e68
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ca8, Size=0x10) returned 0x53db0e8
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8c48, Size=0x10) returned 0x53db118
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ca8, Size=0x8) returned 0x53c8c98
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8cc8, Size=0x8) returned 0x53c8cd8
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53db0e8, Size=0x20) returned 0x53c5e90
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53db118, Size=0x20) returned 0x53c5eb8
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ce8, Size=0x8) returned 0x53c8cf8
	[0033.882] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53db190, Size=0x20) returned 0x53c5ee0
	[0033.882] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x53ee448, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0033.882] lstrlenW (lpString="C:\\") returned 3
	[0033.882] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x18fc0c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x18fc0c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0033.883] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53ee448 | out: hHeap=0x5350000) returned 1
	[0033.884] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8d28, Size=0x82) returned 0x53db710
	[0033.884] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8d48, Size=0x100) returned 0x53db7a0
	[0033.884] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53db710, Size=0x104) returned 0x53db9c8
	[0033.884] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53db7a0, Size=0x200) returned 0x53dbad8
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c8d38 | out: hHeap=0x5350000) returned 1
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53dbad8 | out: hHeap=0x5350000) returned 1
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db238 | out: hHeap=0x5350000) returned 1
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db600 | out: hHeap=0x5350000) returned 1
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db1f0 | out: hHeap=0x5350000) returned 1
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db688 | out: hHeap=0x5350000) returned 1
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db220 | out: hHeap=0x5350000) returned 1
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db9c8 | out: hHeap=0x5350000) returned 1
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db208 | out: hHeap=0x5350000) returned 1
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db8a8 | out: hHeap=0x5350000) returned 1
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db250 | out: hHeap=0x5350000) returned 1
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db938 | out: hHeap=0x5350000) returned 1
	[0033.885] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db268 | out: hHeap=0x5350000) returned 1
	[0033.885] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53db268, Size=0x20) returned 0x53c5f08
	[0033.885] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5f08, Size=0x40) returned 0x53a2828
	[0033.890] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53db1d8, Size=0x20) returned 0x53c5ee0
	[0033.890] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5ee0, Size=0x40) returned 0x53a2870
	[0033.890] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2870, Size=0x80) returned 0x53c8a48
	[0033.890] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8a48, Size=0x100) returned 0x541e5e8
	[0033.890] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x541e5e8, Size=0x200) returned 0x541e5e8
	[0033.890] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x541e5e8, Size=0x400) returned 0x541e5e8
	[0033.890] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x541e5e8, Size=0x800) returned 0x541e5e8
	[0033.890] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x541e5e8, Size=0x1000) returned 0x53dd4f0
	[0033.890] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ce8, Size=0x8) returned 0x53c8d08
	[0033.891] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8d08, Size=0x10) returned 0x53db208
	[0033.891] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53db208, Size=0x20) returned 0x53c5ee0
	[0033.891] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5ee0, Size=0x40) returned 0x53a2870
	[0033.891] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2870, Size=0x80) returned 0x53c8a48
	[0033.891] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8a48, Size=0x100) returned 0x541e9e8
	[0033.891] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x541e9e8, Size=0x200) returned 0x541e9e8
	[0033.891] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x541e9e8, Size=0x400) returned 0x541e9e8
	[0033.891] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x541e9e8, Size=0x800) returned 0x53dfcf8
	[0033.891] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e05d8, Size=0x20) returned 0x53c5ee0
	[0033.891] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5ee0, Size=0x40) returned 0x53a2870
	[0033.891] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2870, Size=0x80) returned 0x53e0d18
	[0033.892] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8e88, Size=0x8) returned 0x53c8e98
	[0033.892] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8e98, Size=0x10) returned 0x53e05d8
	[0033.892] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e05d8, Size=0x20) returned 0x53c5f30
	[0033.892] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0608, Size=0x20) returned 0x53c5f58
	[0033.892] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5f58, Size=0x40) returned 0x53a2870
	[0033.892] lstrlenW (lpString="RETURN FILES.txt") returned 16
	[0033.892] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0608, Size=0x20) returned 0x53c5f58
	[0033.892] lstrlenW (lpString="Info.hta") returned 8
	[0033.892] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x541e9e8, nSize=0x7fff | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\demo.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\demo.exe")) returned 0x2e
	[0034.531] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x541e9e8 | out: hHeap=0x5350000) returned 1
	[0034.531] lstrlenW (lpString="demo.exe") returned 8
	[0034.531] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5f30, Size=0x40) returned 0x53a2900
	[0034.531] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e06c8, Size=0x20) returned 0x53c5f30
	[0034.531] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e06c8, Size=0x20) returned 0x53c6070
	[0034.531] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c6070, Size=0x40) returned 0x53a2948
	[0034.531] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2948, Size=0x80) returned 0x53e0d18
	[0034.532] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0d18, Size=0x100) returned 0x53dd5c8
	[0034.532] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0034.532] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53dd5c8 | out: hHeap=0x5350000) returned 1
	[0034.532] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x541e9e8, nSize=0x8000 | out: lpDst="C:\\Windows;") returned 0xc
	[0034.532] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x542e9f0 | out: hHeap=0x5350000) returned 1
	[0034.532] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x541e9e8 | out: hHeap=0x5350000) returned 1
	[0034.532] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8e98, Size=0x8) returned 0x53c8e88
	[0034.532] lstrlenW (lpString="%windir%;") returned 9
	[0034.532] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c5f30 | out: hHeap=0x5350000) returned 1
	[0034.532] lstrlenW (lpString="C:\\Windows;") returned 11
	[0034.532] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53ee448 | out: hHeap=0x5350000) returned 1
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e06e0, Size=0x20) returned 0x53c5f30
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5f30, Size=0x40) returned 0x53a2948
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2948, Size=0x80) returned 0x53e0d18
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0d18, Size=0x100) returned 0x53e2d18
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ec8, Size=0x8) returned 0x53c8ed8
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ed8, Size=0x10) returned 0x53e0728
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0728, Size=0x20) returned 0x53c5f30
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8e98, Size=0x8) returned 0x53c8ed8
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ea8, Size=0x8) returned 0x53c8e98
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ec8, Size=0x8) returned 0x53c8ee8
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ee8, Size=0x10) returned 0x53e07d0
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e07d0, Size=0x20) returned 0x53c6070
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ed8, Size=0x10) returned 0x53e07d0
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8e98, Size=0x10) returned 0x53e0800
	[0034.533] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ed8, Size=0x8) returned 0x53c8ec8
	[0034.534] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8ef8, Size=0x8) returned 0x53c8f08
	[0034.534] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e07d0, Size=0x20) returned 0x53c6098
	[0034.534] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0800, Size=0x20) returned 0x53c60c0
	[0034.534] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8f18, Size=0x8) returned 0x53c8f28
	[0034.534] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0878, Size=0x20) returned 0x53c6110
	[0034.534] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x53ee448, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0034.534] lstrlenW (lpString="C:\\") returned 3
	[0034.534] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x18fc0c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x18fc0c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0034.534] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53ee448 | out: hHeap=0x5350000) returned 1
	[0034.534] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53dd708, Size=0x82) returned 0x53ddb60
	[0034.534] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53dd728, Size=0x100) returned 0x53e2d18
	[0034.534] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53ddb60, Size=0x104) returned 0x53ddd10
	[0034.534] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e2d18, Size=0x200) returned 0x53dde20
	[0034.535] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53dd718 | out: hHeap=0x5350000) returned 1
	[0034.535] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53dde20 | out: hHeap=0x5350000) returned 1
	[0034.535] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e0920 | out: hHeap=0x5350000) returned 1
	[0034.535] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e0e28 | out: hHeap=0x5350000) returned 1
	[0034.535] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e08d8 | out: hHeap=0x5350000) returned 1
	[0034.535] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e0eb0 | out: hHeap=0x5350000) returned 1
	[0034.535] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e0908 | out: hHeap=0x5350000) returned 1
	[0034.536] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53ddd10 | out: hHeap=0x5350000) returned 1
	[0034.536] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e08f0 | out: hHeap=0x5350000) returned 1
	[0034.536] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53ddbf0 | out: hHeap=0x5350000) returned 1
	[0034.536] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e0938 | out: hHeap=0x5350000) returned 1
	[0034.536] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53ddc80 | out: hHeap=0x5350000) returned 1
	[0034.536] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e0950 | out: hHeap=0x5350000) returned 1
	[0034.536] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0950, Size=0x20) returned 0x53c6138
	[0034.536] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c6138, Size=0x40) returned 0x53a2948
	[0034.537] WaitForMultipleObjects (nCount=0x2, lpHandles=0x53c7d48*=0x124, bWaitAll=1, dwMilliseconds=0xffffffff) 

Thread:
	id = 2
	os_tid = 0xa00


Thread:
	id = 4
	os_tid = 0xa0c

	[0033.129] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53ebc98
	[0033.129] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53ebc98, Size=0x20) returned 0x53a40a8
	[0033.129] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a40a8, Size=0x40) returned 0x53a2678
	[0033.129] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2678, Size=0x80) returned 0x53c7e20
	[0033.129] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c7e20, Size=0x100) returned 0x53c7e20
	[0033.129] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53ebc98
	[0033.129] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53ebc98, Size=0x20) returned 0x53a40a8
	[0033.129] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a40a8, Size=0x40) returned 0x53a2678
	[0033.129] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a2678, Size=0x80) returned 0x53c8938
	[0033.129] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8938, Size=0x100) returned 0x53c8938
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ebc98
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x53c8bb8
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53ebcb0
	[0033.130] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8bb8, Size=0x8) returned 0x53c8bc8
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x14) returned 0x53c4ee8
	[0033.130] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8bc8, Size=0x10) returned 0x53ebcc8
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x18) returned 0x53c4f08
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x1a) returned 0x53a40a8
	[0033.130] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53ebcc8, Size=0x20) returned 0x53a40d0
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x1c) returned 0x53a4080
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x16) returned 0x53c4f28
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x1a) returned 0x53c5d78
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xc) returned 0x53ebcc8
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x4) returned 0x53c8bc8
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40) returned 0x53a2678
	[0033.130] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8bc8, Size=0x8) returned 0x53c8bb8
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x3c) returned 0x53a26c0
	[0033.130] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c8bb8, Size=0x10) returned 0x53ebce0
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x14) returned 0x53c4f48
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x18) returned 0x53c4f68
	[0033.130] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53ebce0, Size=0x20) returned 0x53c5d28
	[0033.130] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x24) returned 0x53c8f40
	[0033.130] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0033.130] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c7e20 | out: hHeap=0x5350000) returned 1
	[0033.130] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0033.130] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c8938 | out: hHeap=0x5350000) returned 1
	[0033.130] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53c5dc8
	[0033.131] EnumServicesStatusExW (in: hSCManager=0x53c5dc8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0033.131] GetLastError () returned 0xea
	[0033.131] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x11e4) returned 0x53ed588
	[0033.131] EnumServicesStatusExW (in: hSCManager=0x53c5dc8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x53ed588, cbBufSize=0x11e4, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x53ed588, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0033.132] CloseServiceHandle (hSCObject=0x53c5dc8) returned 1
	[0033.132] lstrlenW (lpString="Appinfo") returned 7
	[0033.132] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0033.132] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0033.132] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0033.132] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0033.132] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0033.132] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0033.132] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0033.132] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0033.132] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0033.132] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0033.132] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0033.132] lstrlenW (lpString="AudioSrv") returned 8
	[0033.132] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0033.132] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0033.132] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0033.132] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0033.133] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0033.133] lstrlenW (lpString="BFE") returned 3
	[0033.133] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0033.133] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0033.133] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0033.133] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0033.133] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0033.133] lstrlenW (lpString="CryptSvc") returned 8
	[0033.133] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0033.133] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0033.133] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0033.133] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0033.133] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0033.133] lstrlenW (lpString="CscService") returned 10
	[0033.133] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0033.133] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0033.133] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0033.133] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0033.133] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0033.133] lstrlenW (lpString="DcomLaunch") returned 10
	[0033.133] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0033.133] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0033.133] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0033.133] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0033.133] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0033.133] lstrlenW (lpString="Dhcp") returned 4
	[0033.133] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0033.133] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0033.133] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0033.133] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0033.133] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0033.133] lstrlenW (lpString="Dnscache") returned 8
	[0033.133] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0033.133] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0033.134] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0033.134] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0033.134] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0033.134] lstrlenW (lpString="DPS") returned 3
	[0033.134] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0033.134] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0033.134] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0033.134] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0033.134] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0033.134] lstrlenW (lpString="eventlog") returned 8
	[0033.134] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0033.134] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0033.134] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0033.134] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0033.134] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0033.134] lstrlenW (lpString="EventSystem") returned 11
	[0033.134] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0033.134] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0033.134] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0033.134] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0033.134] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0033.134] lstrlenW (lpString="gpsvc") returned 5
	[0033.134] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0033.134] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0033.134] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0033.134] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0033.134] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0033.134] lstrlenW (lpString="iphlpsvc") returned 8
	[0033.134] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0033.134] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0033.134] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0033.134] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0033.134] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0033.134] lstrlenW (lpString="LanmanServer") returned 12
	[0033.135] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0033.135] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0033.135] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0033.135] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0033.135] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0033.135] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0033.135] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0033.135] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0033.135] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0033.135] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0033.135] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0033.135] lstrlenW (lpString="lmhosts") returned 7
	[0033.135] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0033.135] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0033.135] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0033.135] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0033.135] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0033.135] lstrlenW (lpString="MMCSS") returned 5
	[0033.135] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0033.135] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0033.135] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0033.135] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0033.135] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0033.135] lstrlenW (lpString="MpsSvc") returned 6
	[0033.135] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0033.135] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0033.135] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0033.135] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0033.135] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0033.135] lstrlenW (lpString="Netman") returned 6
	[0033.135] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0033.135] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0033.135] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0033.136] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0033.136] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0033.136] lstrlenW (lpString="netprofm") returned 8
	[0033.136] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0033.136] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0033.136] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0033.136] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0033.136] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0033.136] lstrlenW (lpString="NlaSvc") returned 6
	[0033.136] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0033.136] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0033.136] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0033.136] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0033.136] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0033.136] lstrlenW (lpString="nsi") returned 3
	[0033.136] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0033.136] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0033.136] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0033.136] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0033.136] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0033.136] lstrlenW (lpString="PcaSvc") returned 6
	[0033.136] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0033.136] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0033.136] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0033.136] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0033.136] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0033.136] lstrlenW (lpString="PlugPlay") returned 8
	[0033.136] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0033.136] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0033.136] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0033.136] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0033.136] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0033.136] lstrlenW (lpString="Power") returned 5
	[0033.136] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0033.137] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0033.137] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0033.137] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0033.137] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0033.137] lstrlenW (lpString="ProfSvc") returned 7
	[0033.137] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0033.137] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0033.137] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0033.137] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0033.137] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0033.137] lstrlenW (lpString="RpcEptMapper") returned 12
	[0033.137] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0033.137] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0033.137] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0033.137] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0033.137] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0033.137] lstrlenW (lpString="RpcSs") returned 5
	[0033.137] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0033.137] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0033.137] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0033.137] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0033.137] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0033.137] lstrlenW (lpString="SamSs") returned 5
	[0033.137] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0033.137] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0033.137] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0033.137] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0033.137] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0033.137] lstrlenW (lpString="Schedule") returned 8
	[0033.137] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0033.137] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0033.137] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0033.137] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0033.137] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0033.138] lstrlenW (lpString="SENS") returned 4
	[0033.138] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0033.138] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0033.138] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0033.138] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0033.138] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0033.138] lstrlenW (lpString="ShellHWDetection") returned 16
	[0033.138] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0033.138] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0033.138] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0033.138] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0033.138] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0033.138] lstrlenW (lpString="Spooler") returned 7
	[0033.138] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0033.138] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0033.138] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0033.138] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0033.138] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0033.138] lstrlenW (lpString="SysMain") returned 7
	[0033.138] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0033.138] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0033.138] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0033.138] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0033.138] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0033.138] lstrlenW (lpString="Themes") returned 6
	[0033.138] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0033.138] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0033.138] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0033.138] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0033.138] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0033.138] lstrlenW (lpString="TrkWks") returned 6
	[0033.138] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0033.138] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0033.138] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0033.139] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0033.139] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0033.139] lstrlenW (lpString="UxSms") returned 5
	[0033.139] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0033.139] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0033.139] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0033.139] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0033.139] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0033.139] lstrlenW (lpString="WdiServiceHost") returned 14
	[0033.139] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0033.139] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0033.139] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0033.139] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0033.139] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0033.139] lstrlenW (lpString="WdiSystemHost") returned 13
	[0033.139] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0033.139] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0033.139] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0033.139] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0033.139] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0033.139] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0033.139] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0033.139] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0033.139] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0033.139] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0033.139] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0033.139] lstrlenW (lpString="Winmgmt") returned 7
	[0033.139] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0033.139] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0033.139] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0033.139] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0033.139] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0033.139] lstrlenW (lpString="WPDBusEnum") returned 10
	[0033.139] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0033.140] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0033.140] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0033.140] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0033.140] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0033.140] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53ed588 | out: hHeap=0x5350000) returned 1
	[0033.140] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x114
	[0033.142] Process32FirstW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0033.143] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0033.144] lstrlenW (lpString="System") returned 6
	[0033.144] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0033.144] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0033.144] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0033.144] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0033.144] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0033.144] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0033.144] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0033.144] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0033.144] lstrlenW (lpString="smss.exe") returned 8
	[0033.144] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0033.145] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0033.145] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0033.145] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0033.145] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0033.145] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0033.145] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0033.145] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0033.145] lstrlenW (lpString="csrss.exe") returned 9
	[0033.145] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0033.145] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0033.145] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0033.145] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0033.145] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0033.145] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0033.145] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0033.145] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0033.146] lstrlenW (lpString="wininit.exe") returned 11
	[0033.146] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0033.146] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0033.146] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0033.146] lstrcmpiW (lpString1="postgres.exe", lpString2="wininit.exe") returned -1
	[0033.146] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="wininit.exe") returned -1
	[0033.146] lstrcmpiW (lpString1="mysqld.exe", lpString2="wininit.exe") returned -1
	[0033.146] lstrcmpiW (lpString1="sqlservr.exe", lpString2="wininit.exe") returned -1
	[0033.146] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0033.147] lstrlenW (lpString="csrss.exe") returned 9
	[0033.147] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0033.147] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0033.147] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0033.147] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0033.147] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0033.147] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0033.147] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0033.148] lstrlenW (lpString="winlogon.exe") returned 12
	[0033.148] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0033.148] lstrlenW (lpString="services.exe") returned 12
	[0033.148] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0033.149] lstrlenW (lpString="lsass.exe") returned 9
	[0033.149] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0033.150] lstrlenW (lpString="lsm.exe") returned 7
	[0033.150] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0033.150] lstrlenW (lpString="svchost.exe") returned 11
	[0033.150] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0033.151] lstrlenW (lpString="svchost.exe") returned 11
	[0033.151] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0033.151] lstrlenW (lpString="svchost.exe") returned 11
	[0033.151] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0033.152] lstrlenW (lpString="svchost.exe") returned 11
	[0033.152] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2b, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0033.153] lstrlenW (lpString="svchost.exe") returned 11
	[0033.153] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0033.153] lstrlenW (lpString="audiodg.exe") returned 11
	[0033.153] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0033.154] lstrlenW (lpString="svchost.exe") returned 11
	[0033.154] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0033.154] lstrlenW (lpString="svchost.exe") returned 11
	[0033.154] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0033.155] lstrlenW (lpString="dwm.exe") returned 7
	[0033.155] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0033.156] lstrlenW (lpString="explorer.exe") returned 12
	[0033.156] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0033.156] lstrlenW (lpString="spoolsv.exe") returned 11
	[0033.156] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0033.157] lstrlenW (lpString="taskhost.exe") returned 12
	[0033.157] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0033.157] lstrlenW (lpString="svchost.exe") returned 11
	[0033.157] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0033.158] lstrlenW (lpString="taskeng.exe") returned 11
	[0033.158] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0033.159] lstrlenW (lpString="taskhost.exe") returned 12
	[0033.159] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0033.160] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0033.160] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0033.160] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0033.160] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0033.161] lstrlenW (lpString="possibilities.exe") returned 17
	[0033.161] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0033.161] lstrlenW (lpString="wilson.exe") returned 10
	[0033.161] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0033.162] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0033.162] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0033.163] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0033.163] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0033.163] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0033.163] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0033.164] lstrlenW (lpString="crisis.exe") returned 10
	[0033.164] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0033.164] lstrlenW (lpString="dramatically.exe") returned 16
	[0033.164] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0033.165] lstrlenW (lpString="rocket.exe") returned 10
	[0033.165] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0033.165] lstrlenW (lpString="warrant.exe") returned 11
	[0033.166] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0033.166] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0033.166] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0033.167] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0033.167] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0033.167] lstrlenW (lpString="israel.exe") returned 10
	[0033.167] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0033.168] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0033.168] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0033.168] lstrlenW (lpString="toxic chain.exe") returned 15
	[0033.169] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0033.169] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0033.169] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0033.170] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0033.170] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0033.173] lstrlenW (lpString="dllhost.exe") returned 11
	[0033.173] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0033.940] lstrlenW (lpString="dllhost.exe") returned 11
	[0033.940] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0033.941] lstrlenW (lpString="demo.exe") returned 8
	[0033.941] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0033.941] lstrlenW (lpString="cmd.exe") returned 7
	[0033.941] Process32NextW (in: hSnapshot=0x114, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 0
	[0033.942] CloseHandle (hObject=0x114) returned 1
	[0033.942] Sleep (dwMilliseconds=0x1f4) 
	[0035.176] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53c62c8
	[0035.177] EnumServicesStatusExW (in: hSCManager=0x53c62c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0035.177] GetLastError () returned 0xea
	[0035.177] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x11e4) returned 0x53e7820
	[0035.177] EnumServicesStatusExW (in: hSCManager=0x53c62c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x53e7820, cbBufSize=0x11e4, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x53e7820, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0035.178] CloseServiceHandle (hSCObject=0x53c62c8) returned 1
	[0035.178] lstrlenW (lpString="Appinfo") returned 7
	[0035.178] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0035.178] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0035.178] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0035.178] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0035.178] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0035.178] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0035.178] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0035.178] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0035.178] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0035.178] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0035.178] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0035.178] lstrlenW (lpString="AudioSrv") returned 8
	[0035.178] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0035.178] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0035.178] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0035.178] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0035.178] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0035.178] lstrlenW (lpString="BFE") returned 3
	[0035.178] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0035.178] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0035.179] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0035.179] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0035.179] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0035.179] lstrlenW (lpString="CryptSvc") returned 8
	[0035.179] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0035.179] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0035.179] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0035.179] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0035.179] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0035.179] lstrlenW (lpString="CscService") returned 10
	[0035.179] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0035.179] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0035.179] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0035.179] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0035.179] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0035.179] lstrlenW (lpString="DcomLaunch") returned 10
	[0035.179] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0035.179] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0035.179] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0035.179] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0035.179] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0035.179] lstrlenW (lpString="Dhcp") returned 4
	[0035.179] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0035.179] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0035.179] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0035.179] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0035.179] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0035.179] lstrlenW (lpString="Dnscache") returned 8
	[0035.179] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0035.179] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0035.179] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0035.179] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0035.180] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0035.180] lstrlenW (lpString="DPS") returned 3
	[0035.180] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0035.180] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0035.180] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0035.180] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0035.180] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0035.180] lstrlenW (lpString="eventlog") returned 8
	[0035.180] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0035.180] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0035.180] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0035.180] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0035.180] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0035.180] lstrlenW (lpString="EventSystem") returned 11
	[0035.180] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0035.180] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0035.180] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0035.180] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0035.180] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0035.180] lstrlenW (lpString="gpsvc") returned 5
	[0035.180] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0035.180] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0035.180] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0035.180] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0035.180] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0035.180] lstrlenW (lpString="iphlpsvc") returned 8
	[0035.180] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0035.180] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0035.180] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0035.180] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0035.180] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0035.180] lstrlenW (lpString="LanmanServer") returned 12
	[0035.180] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0035.181] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0035.181] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0035.181] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0035.181] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0035.181] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0035.181] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0035.181] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0035.181] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0035.181] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0035.181] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0035.181] lstrlenW (lpString="lmhosts") returned 7
	[0035.181] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0035.181] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0035.181] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0035.181] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0035.181] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0035.181] lstrlenW (lpString="MMCSS") returned 5
	[0035.181] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0035.181] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0035.181] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0035.181] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0035.181] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0035.181] lstrlenW (lpString="MpsSvc") returned 6
	[0035.181] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0035.181] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0035.181] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0035.181] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0035.181] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0035.181] lstrlenW (lpString="Netman") returned 6
	[0035.181] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0035.181] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0035.181] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0035.181] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0035.182] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0035.182] lstrlenW (lpString="netprofm") returned 8
	[0035.182] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0035.182] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0035.182] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0035.182] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0035.182] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0035.182] lstrlenW (lpString="NlaSvc") returned 6
	[0035.182] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0035.182] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0035.182] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0035.182] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0035.182] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0035.182] lstrlenW (lpString="nsi") returned 3
	[0035.182] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0035.182] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0035.182] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0035.182] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0035.182] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0035.182] lstrlenW (lpString="PcaSvc") returned 6
	[0035.182] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0035.182] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0035.182] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0035.182] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0035.182] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0035.182] lstrlenW (lpString="PlugPlay") returned 8
	[0035.182] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0035.182] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0035.182] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0035.182] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0035.182] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0035.182] lstrlenW (lpString="Power") returned 5
	[0035.183] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0035.183] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0035.183] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0035.183] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0035.183] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0035.183] lstrlenW (lpString="ProfSvc") returned 7
	[0035.183] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0035.183] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0035.183] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0035.183] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0035.183] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0035.183] lstrlenW (lpString="RpcEptMapper") returned 12
	[0035.183] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0035.183] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0035.183] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0035.183] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0035.183] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0035.183] lstrlenW (lpString="RpcSs") returned 5
	[0035.183] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0035.183] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0035.183] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0035.183] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0035.183] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0035.183] lstrlenW (lpString="SamSs") returned 5
	[0035.183] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0035.183] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0035.183] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0035.183] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0035.183] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0035.183] lstrlenW (lpString="Schedule") returned 8
	[0035.183] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0035.183] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0035.183] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0035.184] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0035.184] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0035.184] lstrlenW (lpString="SENS") returned 4
	[0035.184] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0035.184] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0035.184] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0035.184] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0035.184] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0035.184] lstrlenW (lpString="ShellHWDetection") returned 16
	[0035.184] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0035.184] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0035.184] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0035.184] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0035.184] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0035.184] lstrlenW (lpString="Spooler") returned 7
	[0035.184] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0035.184] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0035.184] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0035.184] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0035.184] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0035.184] lstrlenW (lpString="SysMain") returned 7
	[0035.184] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0035.184] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0035.184] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0035.184] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0035.184] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0035.184] lstrlenW (lpString="Themes") returned 6
	[0035.184] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0035.184] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0035.184] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0035.184] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0035.184] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0035.185] lstrlenW (lpString="TrkWks") returned 6
	[0035.185] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0035.185] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0035.185] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0035.185] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0035.185] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0035.185] lstrlenW (lpString="UxSms") returned 5
	[0035.185] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0035.185] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0035.185] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0035.185] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0035.185] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0035.185] lstrlenW (lpString="WdiServiceHost") returned 14
	[0035.185] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0035.185] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0035.185] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0035.185] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0035.185] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0035.185] lstrlenW (lpString="WdiSystemHost") returned 13
	[0035.185] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0035.185] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0035.185] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0035.185] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0035.185] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0035.185] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0035.185] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0035.185] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0035.185] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0035.185] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0035.185] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0035.186] lstrlenW (lpString="Winmgmt") returned 7
	[0035.186] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0035.186] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0035.186] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0035.186] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0035.186] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0035.186] lstrlenW (lpString="WPDBusEnum") returned 10
	[0035.186] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0035.186] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0035.186] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0035.186] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0035.186] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0035.186] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e7820 | out: hHeap=0x5350000) returned 1
	[0035.186] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x168
	[0035.189] Process32FirstW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0035.189] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0035.190] lstrlenW (lpString="System") returned 6
	[0035.190] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0035.190] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0035.190] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0035.190] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0035.190] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0035.190] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0035.190] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0035.190] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0035.191] lstrlenW (lpString="smss.exe") returned 8
	[0035.191] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0035.191] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0035.191] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0035.191] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0035.191] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0035.191] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0035.191] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0035.191] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0035.192] lstrlenW (lpString="csrss.exe") returned 9
	[0035.192] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0035.192] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0035.192] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0035.192] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0035.192] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0035.192] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0035.192] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0035.192] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0035.193] lstrlenW (lpString="wininit.exe") returned 11
	[0035.193] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0035.193] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0035.193] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0035.193] lstrcmpiW (lpString1="postgres.exe", lpString2="wininit.exe") returned -1
	[0035.193] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="wininit.exe") returned -1
	[0035.193] lstrcmpiW (lpString1="mysqld.exe", lpString2="wininit.exe") returned -1
	[0035.193] lstrcmpiW (lpString1="sqlservr.exe", lpString2="wininit.exe") returned -1
	[0035.193] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0035.193] lstrlenW (lpString="csrss.exe") returned 9
	[0035.193] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0035.194] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0035.194] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0035.194] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0035.194] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0035.194] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0035.194] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0035.194] lstrlenW (lpString="winlogon.exe") returned 12
	[0035.194] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0035.195] lstrlenW (lpString="services.exe") returned 12
	[0035.195] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0035.196] lstrlenW (lpString="lsass.exe") returned 9
	[0035.196] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0035.197] lstrlenW (lpString="lsm.exe") returned 7
	[0035.197] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0035.197] lstrlenW (lpString="svchost.exe") returned 11
	[0035.197] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0035.198] lstrlenW (lpString="svchost.exe") returned 11
	[0035.198] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0035.199] lstrlenW (lpString="svchost.exe") returned 11
	[0035.199] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0035.199] lstrlenW (lpString="svchost.exe") returned 11
	[0035.199] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2b, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0035.200] lstrlenW (lpString="svchost.exe") returned 11
	[0035.200] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0035.201] lstrlenW (lpString="audiodg.exe") returned 11
	[0035.201] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0035.202] lstrlenW (lpString="svchost.exe") returned 11
	[0035.202] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0035.202] lstrlenW (lpString="svchost.exe") returned 11
	[0035.202] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0035.203] lstrlenW (lpString="dwm.exe") returned 7
	[0035.203] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0035.204] lstrlenW (lpString="explorer.exe") returned 12
	[0035.204] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0035.204] lstrlenW (lpString="spoolsv.exe") returned 11
	[0035.204] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0035.205] lstrlenW (lpString="taskhost.exe") returned 12
	[0035.205] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0035.206] lstrlenW (lpString="svchost.exe") returned 11
	[0035.206] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0035.206] lstrlenW (lpString="taskeng.exe") returned 11
	[0035.206] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0035.207] lstrlenW (lpString="taskhost.exe") returned 12
	[0035.207] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0035.208] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0035.208] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0035.208] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0035.208] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0035.209] lstrlenW (lpString="possibilities.exe") returned 17
	[0035.209] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0035.210] lstrlenW (lpString="wilson.exe") returned 10
	[0035.210] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0035.210] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0035.210] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0035.211] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0035.211] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0035.212] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0035.212] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0035.215] lstrlenW (lpString="crisis.exe") returned 10
	[0035.215] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0035.216] lstrlenW (lpString="dramatically.exe") returned 16
	[0035.216] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0035.216] lstrlenW (lpString="rocket.exe") returned 10
	[0035.216] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0035.222] lstrlenW (lpString="warrant.exe") returned 11
	[0035.267] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0035.268] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0035.268] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0035.269] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0035.269] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0035.269] lstrlenW (lpString="israel.exe") returned 10
	[0035.269] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0035.270] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0035.270] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0035.271] lstrlenW (lpString="toxic chain.exe") returned 15
	[0035.271] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0035.271] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0035.271] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0035.272] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0035.272] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0035.273] lstrlenW (lpString="dllhost.exe") returned 11
	[0035.273] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0035.273] lstrlenW (lpString="dllhost.exe") returned 11
	[0035.273] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0035.274] lstrlenW (lpString="demo.exe") returned 8
	[0035.274] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0035.275] lstrlenW (lpString="cmd.exe") returned 7
	[0035.275] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0035.275] lstrlenW (lpString="conhost.exe") returned 11
	[0035.275] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0035.276] lstrlenW (lpString="vssadmin.exe") returned 12
	[0035.276] Process32NextW (in: hSnapshot=0x168, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
	[0035.277] CloseHandle (hObject=0x168) returned 1
	[0035.277] Sleep (dwMilliseconds=0x1f4) 
	[0036.669] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e72b8
	[0036.669] EnumServicesStatusExW (in: hSCManager=0x53e72b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0036.669] GetLastError () returned 0xea
	[0036.669] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x11e4) returned 0x53db4e8
	[0036.669] EnumServicesStatusExW (in: hSCManager=0x53e72b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x53db4e8, cbBufSize=0x11e4, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x53db4e8, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0036.670] CloseServiceHandle (hSCObject=0x53e72b8) returned 1
	[0036.670] lstrlenW (lpString="Appinfo") returned 7
	[0036.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0036.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0036.670] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0036.670] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0036.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0036.670] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0036.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0036.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0036.671] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0036.671] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0036.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0036.671] lstrlenW (lpString="AudioSrv") returned 8
	[0036.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0036.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0036.671] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0036.671] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0036.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0036.671] lstrlenW (lpString="BFE") returned 3
	[0036.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0036.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0036.671] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0036.671] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0036.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0036.671] lstrlenW (lpString="CryptSvc") returned 8
	[0036.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0036.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0036.671] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0036.671] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0036.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0036.671] lstrlenW (lpString="CscService") returned 10
	[0036.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0036.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0036.671] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0036.671] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0036.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0036.671] lstrlenW (lpString="DcomLaunch") returned 10
	[0036.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0036.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0036.672] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0036.672] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0036.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0036.672] lstrlenW (lpString="Dhcp") returned 4
	[0036.672] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0036.672] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0036.672] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0036.672] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0036.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0036.672] lstrlenW (lpString="Dnscache") returned 8
	[0036.672] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0036.672] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0036.672] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0036.672] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0036.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0036.672] lstrlenW (lpString="DPS") returned 3
	[0036.672] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0036.672] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0036.672] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0036.672] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0036.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0036.672] lstrlenW (lpString="eventlog") returned 8
	[0036.672] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0036.672] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0036.672] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0036.672] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0036.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0036.672] lstrlenW (lpString="EventSystem") returned 11
	[0036.672] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0036.672] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0036.672] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0036.672] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0036.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0036.673] lstrlenW (lpString="gpsvc") returned 5
	[0036.673] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0036.673] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0036.673] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0036.673] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0036.673] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0036.673] lstrlenW (lpString="iphlpsvc") returned 8
	[0036.673] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0036.673] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0036.673] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0036.673] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0036.673] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0036.673] lstrlenW (lpString="LanmanServer") returned 12
	[0036.673] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0036.673] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0036.673] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0036.673] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0036.673] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0036.673] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0036.673] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0036.673] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0036.673] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0036.673] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0036.673] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0036.673] lstrlenW (lpString="lmhosts") returned 7
	[0036.673] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0036.673] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0036.673] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0036.673] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0036.673] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0036.673] lstrlenW (lpString="MMCSS") returned 5
	[0036.673] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0036.673] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0036.674] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0036.674] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0036.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0036.674] lstrlenW (lpString="MpsSvc") returned 6
	[0036.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0036.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0036.674] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0036.674] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0036.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0036.674] lstrlenW (lpString="Netman") returned 6
	[0036.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0036.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0036.674] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0036.674] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0036.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0036.674] lstrlenW (lpString="netprofm") returned 8
	[0036.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0036.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0036.674] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0036.674] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0036.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0036.674] lstrlenW (lpString="NlaSvc") returned 6
	[0036.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0036.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0036.674] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0036.674] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0036.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0036.674] lstrlenW (lpString="nsi") returned 3
	[0036.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0036.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0036.674] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0036.674] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0036.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0036.675] lstrlenW (lpString="PcaSvc") returned 6
	[0036.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0036.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0036.675] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0036.675] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0036.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0036.675] lstrlenW (lpString="PlugPlay") returned 8
	[0036.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0036.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0036.675] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0036.675] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0036.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0036.675] lstrlenW (lpString="Power") returned 5
	[0036.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0036.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0036.675] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0036.675] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0036.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0036.675] lstrlenW (lpString="ProfSvc") returned 7
	[0036.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0036.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0036.675] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0036.675] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0036.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0036.675] lstrlenW (lpString="RpcEptMapper") returned 12
	[0036.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0036.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0036.675] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0036.675] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0036.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0036.675] lstrlenW (lpString="RpcSs") returned 5
	[0036.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0036.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0036.676] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0036.676] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0036.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0036.676] lstrlenW (lpString="SamSs") returned 5
	[0036.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0036.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0036.676] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0036.676] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0036.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0036.676] lstrlenW (lpString="Schedule") returned 8
	[0036.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0036.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0036.676] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0036.676] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0036.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0036.676] lstrlenW (lpString="SENS") returned 4
	[0036.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0036.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0036.676] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0036.676] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0036.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0036.676] lstrlenW (lpString="ShellHWDetection") returned 16
	[0036.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0036.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0036.676] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0036.676] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0036.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0036.676] lstrlenW (lpString="Spooler") returned 7
	[0036.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0036.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0036.676] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0036.676] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0036.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0036.677] lstrlenW (lpString="SysMain") returned 7
	[0036.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0036.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0036.677] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0036.677] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0036.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0036.677] lstrlenW (lpString="Themes") returned 6
	[0036.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0036.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0036.677] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0036.677] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0036.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0036.677] lstrlenW (lpString="TrkWks") returned 6
	[0036.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0036.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0036.677] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0036.677] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0036.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0036.677] lstrlenW (lpString="UxSms") returned 5
	[0036.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0036.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0036.677] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0036.677] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0036.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0036.677] lstrlenW (lpString="WdiServiceHost") returned 14
	[0036.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0036.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0036.677] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0036.677] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0036.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0036.677] lstrlenW (lpString="WdiSystemHost") returned 13
	[0036.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0036.678] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0036.678] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0036.678] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0036.678] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0036.678] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0036.678] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0036.678] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0036.678] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0036.678] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0036.678] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0036.678] lstrlenW (lpString="Winmgmt") returned 7
	[0036.678] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0036.678] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0036.678] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0036.678] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0036.678] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0036.678] lstrlenW (lpString="WPDBusEnum") returned 10
	[0036.678] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0036.678] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0036.678] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0036.678] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0036.678] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0036.678] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db4e8 | out: hHeap=0x5350000) returned 1
	[0036.678] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x190
	[0036.682] Process32FirstW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0036.682] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0036.683] lstrlenW (lpString="System") returned 6
	[0036.683] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0036.683] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0036.683] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0036.683] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0036.683] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0036.683] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0036.683] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0036.683] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0036.684] lstrlenW (lpString="smss.exe") returned 8
	[0036.684] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0036.684] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0036.684] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0036.684] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0036.684] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0036.684] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0036.684] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0036.684] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0036.685] lstrlenW (lpString="csrss.exe") returned 9
	[0036.685] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0036.685] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0036.685] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0036.685] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0036.685] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0036.685] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0036.685] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0036.685] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0036.686] lstrlenW (lpString="wininit.exe") returned 11
	[0036.686] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0036.686] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0036.686] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0036.686] lstrcmpiW (lpString1="postgres.exe", lpString2="wininit.exe") returned -1
	[0036.686] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="wininit.exe") returned -1
	[0036.686] lstrcmpiW (lpString1="mysqld.exe", lpString2="wininit.exe") returned -1
	[0036.686] lstrcmpiW (lpString1="sqlservr.exe", lpString2="wininit.exe") returned -1
	[0036.686] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0036.687] lstrlenW (lpString="csrss.exe") returned 9
	[0036.687] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0036.687] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0036.687] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0036.687] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0036.687] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0036.687] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0036.687] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0036.688] lstrlenW (lpString="winlogon.exe") returned 12
	[0036.688] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0036.688] lstrlenW (lpString="services.exe") returned 12
	[0036.688] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0036.689] lstrlenW (lpString="lsass.exe") returned 9
	[0036.689] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0036.690] lstrlenW (lpString="lsm.exe") returned 7
	[0036.690] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0036.691] lstrlenW (lpString="svchost.exe") returned 11
	[0036.691] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0036.691] lstrlenW (lpString="svchost.exe") returned 11
	[0036.691] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0036.692] lstrlenW (lpString="svchost.exe") returned 11
	[0036.692] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0036.693] lstrlenW (lpString="svchost.exe") returned 11
	[0036.693] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2b, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0036.693] lstrlenW (lpString="svchost.exe") returned 11
	[0036.693] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0036.694] lstrlenW (lpString="audiodg.exe") returned 11
	[0036.694] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0036.695] lstrlenW (lpString="svchost.exe") returned 11
	[0036.695] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0036.696] lstrlenW (lpString="svchost.exe") returned 11
	[0036.696] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0036.696] lstrlenW (lpString="dwm.exe") returned 7
	[0036.696] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0036.697] lstrlenW (lpString="explorer.exe") returned 12
	[0036.697] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0036.698] lstrlenW (lpString="spoolsv.exe") returned 11
	[0036.698] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0036.698] lstrlenW (lpString="taskhost.exe") returned 12
	[0036.698] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0036.699] lstrlenW (lpString="svchost.exe") returned 11
	[0036.699] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0036.700] lstrlenW (lpString="taskeng.exe") returned 11
	[0036.700] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0036.700] lstrlenW (lpString="taskhost.exe") returned 12
	[0036.700] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0036.701] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0036.701] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0036.702] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0036.702] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0036.703] lstrlenW (lpString="possibilities.exe") returned 17
	[0036.703] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0036.703] lstrlenW (lpString="wilson.exe") returned 10
	[0036.703] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0036.704] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0036.704] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0036.705] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0036.705] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0036.705] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0036.705] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0036.706] lstrlenW (lpString="crisis.exe") returned 10
	[0036.706] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0036.707] lstrlenW (lpString="dramatically.exe") returned 16
	[0036.707] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0036.707] lstrlenW (lpString="rocket.exe") returned 10
	[0036.707] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0036.708] lstrlenW (lpString="warrant.exe") returned 11
	[0036.708] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0036.709] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0036.709] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0036.710] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0036.710] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0036.710] lstrlenW (lpString="israel.exe") returned 10
	[0036.710] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0036.711] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0036.711] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0036.712] lstrlenW (lpString="toxic chain.exe") returned 15
	[0036.712] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0036.712] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0036.712] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0036.713] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0036.713] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0036.714] lstrlenW (lpString="dllhost.exe") returned 11
	[0036.714] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0037.062] lstrlenW (lpString="dllhost.exe") returned 11
	[0037.062] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0037.063] lstrlenW (lpString="demo.exe") returned 8
	[0037.063] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0037.063] lstrlenW (lpString="cmd.exe") returned 7
	[0037.063] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0037.064] lstrlenW (lpString="conhost.exe") returned 11
	[0037.064] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0037.065] lstrlenW (lpString="vssadmin.exe") returned 12
	[0037.065] Process32NextW (in: hSnapshot=0x190, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
	[0037.065] CloseHandle (hObject=0x190) returned 1
	[0037.065] Sleep (dwMilliseconds=0x1f4) 
	[0037.860] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e7470
	[0037.861] EnumServicesStatusExW (in: hSCManager=0x53e7470, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0037.861] GetLastError () returned 0xea
	[0037.861] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x123e) returned 0x53db4e8
	[0037.861] EnumServicesStatusExW (in: hSCManager=0x53e7470, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x53db4e8, cbBufSize=0x123e, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x53db4e8, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0037.862] CloseServiceHandle (hSCObject=0x53e7470) returned 1
	[0037.862] lstrlenW (lpString="Appinfo") returned 7
	[0037.862] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0037.862] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0037.862] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0037.862] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0037.862] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0037.862] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0037.862] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0037.862] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0037.862] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0037.862] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0037.862] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0037.862] lstrlenW (lpString="AudioSrv") returned 8
	[0037.863] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0037.863] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0037.863] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0037.863] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0037.863] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0037.863] lstrlenW (lpString="BFE") returned 3
	[0037.863] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0037.863] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0037.863] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0037.863] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0037.863] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0037.863] lstrlenW (lpString="CryptSvc") returned 8
	[0037.863] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0037.863] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0037.863] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0037.863] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0037.863] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0037.863] lstrlenW (lpString="CscService") returned 10
	[0037.863] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0037.863] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0037.863] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0037.863] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0037.863] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0037.863] lstrlenW (lpString="DcomLaunch") returned 10
	[0037.863] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0037.863] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0037.863] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0037.863] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0037.863] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0037.863] lstrlenW (lpString="Dhcp") returned 4
	[0037.863] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0037.863] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0037.863] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0037.864] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0037.864] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0037.864] lstrlenW (lpString="Dnscache") returned 8
	[0037.864] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0037.864] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0037.864] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0037.864] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0037.864] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0037.864] lstrlenW (lpString="DPS") returned 3
	[0037.864] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0037.864] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0037.864] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0037.864] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0037.864] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0037.864] lstrlenW (lpString="eventlog") returned 8
	[0037.864] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0037.864] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0037.864] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0037.864] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0037.864] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0037.864] lstrlenW (lpString="EventSystem") returned 11
	[0037.864] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0037.864] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0037.864] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0037.864] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0037.864] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0037.864] lstrlenW (lpString="gpsvc") returned 5
	[0037.864] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0037.864] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0037.864] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0037.864] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0037.864] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0037.864] lstrlenW (lpString="iphlpsvc") returned 8
	[0037.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0037.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0037.865] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0037.865] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0037.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0037.865] lstrlenW (lpString="LanmanServer") returned 12
	[0037.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0037.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0037.865] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0037.865] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0037.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0037.865] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0037.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0037.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0037.865] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0037.865] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0037.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0037.865] lstrlenW (lpString="lmhosts") returned 7
	[0037.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0037.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0037.865] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0037.865] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0037.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0037.865] lstrlenW (lpString="MMCSS") returned 5
	[0037.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0037.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0037.865] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0037.865] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0037.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0037.865] lstrlenW (lpString="MpsSvc") returned 6
	[0037.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0037.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0037.865] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0037.865] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0037.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0037.866] lstrlenW (lpString="Netman") returned 6
	[0037.866] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0037.866] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0037.866] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0037.866] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0037.866] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0037.866] lstrlenW (lpString="netprofm") returned 8
	[0037.866] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0037.866] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0037.866] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0037.866] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0037.866] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0037.866] lstrlenW (lpString="NlaSvc") returned 6
	[0037.866] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0037.866] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0037.866] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0037.866] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0037.866] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0037.866] lstrlenW (lpString="nsi") returned 3
	[0037.866] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0037.866] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0037.866] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0037.866] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0037.866] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0037.866] lstrlenW (lpString="PcaSvc") returned 6
	[0037.866] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0037.866] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0037.866] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0037.866] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0037.866] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0037.866] lstrlenW (lpString="PlugPlay") returned 8
	[0037.866] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0037.866] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0037.866] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0037.867] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0037.867] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0037.867] lstrlenW (lpString="Power") returned 5
	[0037.867] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0037.867] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0037.867] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0037.867] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0037.867] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0037.867] lstrlenW (lpString="ProfSvc") returned 7
	[0037.867] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0037.867] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0037.867] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0037.867] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0037.867] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0037.867] lstrlenW (lpString="RpcEptMapper") returned 12
	[0037.867] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0037.867] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0037.867] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0037.867] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0037.867] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0037.867] lstrlenW (lpString="RpcSs") returned 5
	[0037.867] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0037.867] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0037.867] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0037.867] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0037.867] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0037.867] lstrlenW (lpString="SamSs") returned 5
	[0037.867] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0037.867] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0037.867] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0037.867] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0037.867] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0037.868] lstrlenW (lpString="Schedule") returned 8
	[0037.868] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0037.868] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0037.868] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0037.868] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0037.868] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0037.868] lstrlenW (lpString="SENS") returned 4
	[0037.868] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0037.868] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0037.868] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0037.868] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0037.868] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0037.868] lstrlenW (lpString="ShellHWDetection") returned 16
	[0037.868] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0037.868] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0037.868] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0037.868] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0037.868] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0037.868] lstrlenW (lpString="Spooler") returned 7
	[0037.868] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0037.868] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0037.868] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0037.868] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0037.868] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0037.868] lstrlenW (lpString="SysMain") returned 7
	[0037.868] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0037.868] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0037.868] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0037.868] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0037.868] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0037.868] lstrlenW (lpString="Themes") returned 6
	[0037.868] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0037.868] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0037.869] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0037.869] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0037.869] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0037.869] lstrlenW (lpString="TrkWks") returned 6
	[0037.869] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0037.869] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0037.869] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0037.869] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0037.869] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0037.869] lstrlenW (lpString="UxSms") returned 5
	[0037.869] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0037.869] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0037.869] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0037.869] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0037.869] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0037.869] lstrlenW (lpString="VSS") returned 3
	[0037.869] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0037.869] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0037.869] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0037.869] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0037.869] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0037.869] lstrlenW (lpString="WdiServiceHost") returned 14
	[0037.870] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0037.870] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0037.870] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0037.870] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0037.870] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0037.870] lstrlenW (lpString="WdiSystemHost") returned 13
	[0037.870] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0037.870] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0037.870] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0037.870] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0037.870] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0037.870] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0037.870] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0037.870] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0037.870] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0037.870] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0037.870] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0037.870] lstrlenW (lpString="Winmgmt") returned 7
	[0037.870] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0037.870] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0037.870] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0037.870] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0037.870] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0037.870] lstrlenW (lpString="WPDBusEnum") returned 10
	[0037.870] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0037.870] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0037.870] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0037.870] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0037.870] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0037.870] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53db4e8 | out: hHeap=0x5350000) returned 1
	[0037.870] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a0
	[0037.873] Process32FirstW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0037.873] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0037.874] lstrlenW (lpString="System") returned 6
	[0037.874] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0037.874] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0037.874] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0037.874] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0037.874] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0037.874] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0037.874] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0037.874] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0037.875] lstrlenW (lpString="smss.exe") returned 8
	[0037.875] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0037.875] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0037.875] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0037.875] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0037.875] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0037.875] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0037.875] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0037.875] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0037.876] lstrlenW (lpString="csrss.exe") returned 9
	[0037.876] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0037.876] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0037.876] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0037.876] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0037.876] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0037.876] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0037.876] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0037.876] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0037.877] lstrlenW (lpString="wininit.exe") returned 11
	[0037.877] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0037.877] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0037.877] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0037.877] lstrcmpiW (lpString1="postgres.exe", lpString2="wininit.exe") returned -1
	[0037.877] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="wininit.exe") returned -1
	[0037.877] lstrcmpiW (lpString1="mysqld.exe", lpString2="wininit.exe") returned -1
	[0037.877] lstrcmpiW (lpString1="sqlservr.exe", lpString2="wininit.exe") returned -1
	[0037.877] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0037.877] lstrlenW (lpString="csrss.exe") returned 9
	[0037.878] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0037.878] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0037.878] lstrlenW (lpString="winlogon.exe") returned 12
	[0037.878] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0037.879] lstrlenW (lpString="services.exe") returned 12
	[0037.879] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0037.880] lstrlenW (lpString="lsass.exe") returned 9
	[0037.880] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0037.880] lstrlenW (lpString="lsm.exe") returned 7
	[0037.880] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.881] lstrlenW (lpString="svchost.exe") returned 11
	[0037.881] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.882] lstrlenW (lpString="svchost.exe") returned 11
	[0037.882] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.882] lstrlenW (lpString="svchost.exe") returned 11
	[0037.882] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.883] lstrlenW (lpString="svchost.exe") returned 11
	[0037.883] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2b, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.884] lstrlenW (lpString="svchost.exe") returned 11
	[0037.884] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0037.884] lstrlenW (lpString="audiodg.exe") returned 11
	[0037.884] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.885] lstrlenW (lpString="svchost.exe") returned 11
	[0037.885] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.886] lstrlenW (lpString="svchost.exe") returned 11
	[0037.886] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0037.886] lstrlenW (lpString="dwm.exe") returned 7
	[0037.886] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0037.887] lstrlenW (lpString="explorer.exe") returned 12
	[0037.887] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0037.888] lstrlenW (lpString="spoolsv.exe") returned 11
	[0037.888] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0037.888] lstrlenW (lpString="taskhost.exe") returned 12
	[0037.888] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.889] lstrlenW (lpString="svchost.exe") returned 11
	[0037.889] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0037.890] lstrlenW (lpString="taskeng.exe") returned 11
	[0037.890] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0037.890] lstrlenW (lpString="taskhost.exe") returned 12
	[0037.890] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0037.891] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0037.891] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0037.892] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0037.892] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0037.892] lstrlenW (lpString="possibilities.exe") returned 17
	[0037.893] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0037.893] lstrlenW (lpString="wilson.exe") returned 10
	[0037.893] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0037.894] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0037.894] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0037.894] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0037.895] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0037.895] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0037.895] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0037.896] lstrlenW (lpString="crisis.exe") returned 10
	[0037.896] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0037.897] lstrlenW (lpString="dramatically.exe") returned 16
	[0037.897] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0037.897] lstrlenW (lpString="rocket.exe") returned 10
	[0037.897] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0037.898] lstrlenW (lpString="warrant.exe") returned 11
	[0037.898] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0037.899] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0037.899] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0037.899] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0037.899] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0038.198] lstrlenW (lpString="israel.exe") returned 10
	[0038.198] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0038.199] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0038.199] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0038.199] lstrlenW (lpString="toxic chain.exe") returned 15
	[0038.199] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0038.200] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0038.200] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0038.201] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0038.201] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0038.201] lstrlenW (lpString="dllhost.exe") returned 11
	[0038.201] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0038.202] lstrlenW (lpString="dllhost.exe") returned 11
	[0038.202] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0038.203] lstrlenW (lpString="demo.exe") returned 8
	[0038.203] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0038.203] lstrlenW (lpString="cmd.exe") returned 7
	[0038.203] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0038.204] lstrlenW (lpString="conhost.exe") returned 11
	[0038.204] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0038.205] lstrlenW (lpString="vssadmin.exe") returned 12
	[0038.205] Process32NextW (in: hSnapshot=0x1a0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
	[0038.205] CloseHandle (hObject=0x1a0) returned 1
	[0038.206] Sleep (dwMilliseconds=0x1f4) 
	[0038.846] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e74c0
	[0038.846] EnumServicesStatusExW (in: hSCManager=0x53e74c0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0038.846] GetLastError () returned 0xea
	[0038.846] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x123e) returned 0x82250c8
	[0038.847] EnumServicesStatusExW (in: hSCManager=0x53e74c0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x82250c8, cbBufSize=0x123e, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x82250c8, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0038.847] CloseServiceHandle (hSCObject=0x53e74c0) returned 1
	[0038.847] lstrlenW (lpString="Appinfo") returned 7
	[0038.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0038.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0038.848] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0038.848] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0038.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0038.848] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0038.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0038.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0038.848] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0038.848] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0038.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0038.848] lstrlenW (lpString="AudioSrv") returned 8
	[0038.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0038.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0038.848] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0038.848] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0038.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0038.848] lstrlenW (lpString="BFE") returned 3
	[0038.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0038.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0038.848] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0038.848] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0038.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0038.848] lstrlenW (lpString="CryptSvc") returned 8
	[0038.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0038.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0038.848] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0038.848] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0038.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0038.848] lstrlenW (lpString="CscService") returned 10
	[0038.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0038.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0038.848] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0038.849] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0038.849] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0038.849] lstrlenW (lpString="DcomLaunch") returned 10
	[0038.849] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0038.849] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0038.849] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0038.849] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0038.849] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0038.849] lstrlenW (lpString="Dhcp") returned 4
	[0038.849] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0038.849] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0038.849] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0038.849] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0038.849] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0038.849] lstrlenW (lpString="Dnscache") returned 8
	[0038.849] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0038.849] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0038.849] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0038.849] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0038.849] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0038.849] lstrlenW (lpString="DPS") returned 3
	[0038.849] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0038.849] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0038.849] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0038.849] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0038.849] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0038.849] lstrlenW (lpString="eventlog") returned 8
	[0038.849] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0038.849] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0038.849] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0038.849] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0038.849] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0038.850] lstrlenW (lpString="EventSystem") returned 11
	[0038.850] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0038.850] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0038.850] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0038.850] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0038.850] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0038.850] lstrlenW (lpString="gpsvc") returned 5
	[0038.850] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0038.850] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0038.850] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0038.850] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0038.850] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0038.850] lstrlenW (lpString="iphlpsvc") returned 8
	[0038.850] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0038.850] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0038.850] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0038.850] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0038.850] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0038.850] lstrlenW (lpString="LanmanServer") returned 12
	[0038.850] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0038.850] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0038.850] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0038.850] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0038.850] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0038.850] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0038.850] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0038.850] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0038.850] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0038.850] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0038.850] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0038.850] lstrlenW (lpString="lmhosts") returned 7
	[0038.850] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0038.851] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0038.851] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0038.851] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0038.851] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0038.851] lstrlenW (lpString="MMCSS") returned 5
	[0038.851] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0038.851] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0038.851] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0038.851] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0038.851] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0038.851] lstrlenW (lpString="MpsSvc") returned 6
	[0038.851] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0038.851] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0038.851] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0038.851] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0038.851] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0038.851] lstrlenW (lpString="Netman") returned 6
	[0038.851] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0038.851] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0038.851] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0038.851] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0038.851] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0038.851] lstrlenW (lpString="netprofm") returned 8
	[0038.851] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0038.851] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0038.851] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0038.851] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0038.851] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0038.851] lstrlenW (lpString="NlaSvc") returned 6
	[0038.851] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0038.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0038.852] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0038.852] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0038.852] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0038.852] lstrlenW (lpString="nsi") returned 3
	[0038.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0038.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0038.852] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0038.852] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0038.852] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0038.852] lstrlenW (lpString="PcaSvc") returned 6
	[0038.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0038.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0038.852] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0038.852] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0038.852] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0038.852] lstrlenW (lpString="PlugPlay") returned 8
	[0038.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0038.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0038.852] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0038.852] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0038.852] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0038.852] lstrlenW (lpString="Power") returned 5
	[0038.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0038.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0038.852] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0038.852] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0038.852] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0038.852] lstrlenW (lpString="ProfSvc") returned 7
	[0038.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0038.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0038.852] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0038.852] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0038.853] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0038.853] lstrlenW (lpString="RpcEptMapper") returned 12
	[0038.853] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0038.853] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0038.853] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0038.853] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0038.853] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0038.853] lstrlenW (lpString="RpcSs") returned 5
	[0038.853] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0038.853] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0038.853] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0038.853] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0038.853] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0038.853] lstrlenW (lpString="SamSs") returned 5
	[0038.853] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0038.853] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0038.853] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0038.853] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0038.853] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0038.853] lstrlenW (lpString="Schedule") returned 8
	[0038.853] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0038.853] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0038.853] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0038.853] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0038.853] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0038.853] lstrlenW (lpString="SENS") returned 4
	[0038.853] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0038.853] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0038.853] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0038.853] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0038.853] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0038.853] lstrlenW (lpString="ShellHWDetection") returned 16
	[0038.854] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0038.854] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0038.854] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0038.854] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0038.854] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0038.854] lstrlenW (lpString="Spooler") returned 7
	[0038.854] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0038.854] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0038.854] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0038.854] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0038.854] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0038.854] lstrlenW (lpString="SysMain") returned 7
	[0038.854] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0038.854] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0038.854] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0038.854] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0038.854] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0038.854] lstrlenW (lpString="Themes") returned 6
	[0038.854] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0038.854] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0038.854] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0038.854] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0038.854] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0038.854] lstrlenW (lpString="TrkWks") returned 6
	[0038.854] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0038.854] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0038.854] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0038.854] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0038.854] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0038.854] lstrlenW (lpString="UxSms") returned 5
	[0038.854] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0038.854] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0038.854] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0038.855] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0038.855] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0038.855] lstrlenW (lpString="VSS") returned 3
	[0038.855] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0038.855] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0038.855] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0038.855] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0038.855] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0038.855] lstrlenW (lpString="WdiServiceHost") returned 14
	[0038.855] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0038.855] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0038.855] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0038.855] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0038.855] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0038.855] lstrlenW (lpString="WdiSystemHost") returned 13
	[0038.855] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0038.855] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0038.855] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0038.855] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0038.855] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0038.855] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0038.855] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0038.855] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0038.855] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0038.855] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0038.855] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0038.855] lstrlenW (lpString="Winmgmt") returned 7
	[0038.855] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0038.855] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0038.855] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0038.855] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0038.855] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0038.856] lstrlenW (lpString="WPDBusEnum") returned 10
	[0038.856] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0038.856] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0038.856] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0038.856] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0038.856] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0038.856] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x82250c8 | out: hHeap=0x5350000) returned 1
	[0038.856] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19c
	[0038.858] Process32FirstW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0038.859] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0038.859] lstrlenW (lpString="System") returned 6
	[0038.859] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0038.859] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0038.859] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0038.859] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0038.860] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0038.860] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0038.860] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0038.860] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0038.860] lstrlenW (lpString="smss.exe") returned 8
	[0038.860] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0038.860] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0038.860] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0038.860] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0038.860] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0038.860] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0038.860] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0038.861] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0038.861] lstrlenW (lpString="csrss.exe") returned 9
	[0038.861] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0038.861] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0038.861] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0038.861] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0038.861] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0038.861] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0038.861] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0038.861] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0038.862] lstrlenW (lpString="wininit.exe") returned 11
	[0038.862] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0038.862] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0038.862] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0038.862] lstrcmpiW (lpString1="postgres.exe", lpString2="wininit.exe") returned -1
	[0038.862] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="wininit.exe") returned -1
	[0038.862] lstrcmpiW (lpString1="mysqld.exe", lpString2="wininit.exe") returned -1
	[0038.862] lstrcmpiW (lpString1="sqlservr.exe", lpString2="wininit.exe") returned -1
	[0038.862] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0038.863] lstrlenW (lpString="csrss.exe") returned 9
	[0038.863] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0038.863] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0038.864] lstrlenW (lpString="winlogon.exe") returned 12
	[0038.864] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0038.864] lstrlenW (lpString="services.exe") returned 12
	[0038.864] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0038.865] lstrlenW (lpString="lsass.exe") returned 9
	[0038.865] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0038.866] lstrlenW (lpString="lsm.exe") returned 7
	[0038.866] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0038.867] lstrlenW (lpString="svchost.exe") returned 11
	[0038.867] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0038.868] lstrlenW (lpString="svchost.exe") returned 11
	[0038.868] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0038.868] lstrlenW (lpString="svchost.exe") returned 11
	[0038.868] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0038.869] lstrlenW (lpString="svchost.exe") returned 11
	[0038.869] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2b, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0038.870] lstrlenW (lpString="svchost.exe") returned 11
	[0038.870] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0038.870] lstrlenW (lpString="audiodg.exe") returned 11
	[0038.871] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0038.871] lstrlenW (lpString="svchost.exe") returned 11
	[0038.871] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0038.872] lstrlenW (lpString="svchost.exe") returned 11
	[0038.872] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0038.873] lstrlenW (lpString="dwm.exe") returned 7
	[0038.873] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0038.873] lstrlenW (lpString="explorer.exe") returned 12
	[0038.873] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0038.874] lstrlenW (lpString="spoolsv.exe") returned 11
	[0038.874] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0038.875] lstrlenW (lpString="taskhost.exe") returned 12
	[0038.875] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0038.875] lstrlenW (lpString="svchost.exe") returned 11
	[0038.875] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0038.876] lstrlenW (lpString="taskeng.exe") returned 11
	[0038.876] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0038.877] lstrlenW (lpString="taskhost.exe") returned 12
	[0038.877] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0038.878] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0038.878] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0038.878] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0038.878] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0038.879] lstrlenW (lpString="possibilities.exe") returned 17
	[0038.879] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0038.880] lstrlenW (lpString="wilson.exe") returned 10
	[0038.880] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0038.880] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0038.881] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0038.881] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0038.881] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0038.882] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0038.882] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0038.883] lstrlenW (lpString="crisis.exe") returned 10
	[0038.883] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0039.147] lstrlenW (lpString="dramatically.exe") returned 16
	[0039.147] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0039.148] lstrlenW (lpString="rocket.exe") returned 10
	[0039.148] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0039.149] lstrlenW (lpString="warrant.exe") returned 11
	[0039.149] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0039.150] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0039.150] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0039.150] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0039.150] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0039.151] lstrlenW (lpString="israel.exe") returned 10
	[0039.151] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0039.152] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0039.152] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0039.152] lstrlenW (lpString="toxic chain.exe") returned 15
	[0039.152] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0039.153] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0039.153] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0039.154] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0039.154] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0039.155] lstrlenW (lpString="dllhost.exe") returned 11
	[0039.155] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0039.155] lstrlenW (lpString="dllhost.exe") returned 11
	[0039.155] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0039.156] lstrlenW (lpString="demo.exe") returned 8
	[0039.156] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0039.157] lstrlenW (lpString="cmd.exe") returned 7
	[0039.157] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0039.157] lstrlenW (lpString="conhost.exe") returned 11
	[0039.157] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0039.158] lstrlenW (lpString="vssadmin.exe") returned 12
	[0039.158] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0039.159] lstrlenW (lpString="VSSVC.exe") returned 9
	[0039.159] Process32NextW (in: hSnapshot=0x19c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 0
	[0039.160] CloseHandle (hObject=0x19c) returned 1
	[0039.160] Sleep (dwMilliseconds=0x1f4) 
	[0039.819] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e75b0
	[0039.869] EnumServicesStatusExW (in: hSCManager=0x53e75b0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0039.869] GetLastError () returned 0xea
	[0039.870] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x123e) returned 0x82250c8
	[0039.870] EnumServicesStatusExW (in: hSCManager=0x53e75b0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x82250c8, cbBufSize=0x123e, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x82250c8, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0039.870] CloseServiceHandle (hSCObject=0x53e75b0) returned 1
	[0039.871] lstrlenW (lpString="Appinfo") returned 7
	[0039.871] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0039.871] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0039.871] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0039.871] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0039.871] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0039.871] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0039.871] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0039.871] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0039.871] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0039.871] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0039.871] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0039.871] lstrlenW (lpString="AudioSrv") returned 8
	[0039.871] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0039.871] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0039.871] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0039.871] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0039.871] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0039.871] lstrlenW (lpString="BFE") returned 3
	[0039.871] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0039.871] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0039.871] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0039.871] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0039.871] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0039.871] lstrlenW (lpString="CryptSvc") returned 8
	[0039.871] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0039.871] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0039.871] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0039.872] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0039.872] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0039.872] lstrlenW (lpString="CscService") returned 10
	[0039.872] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0039.872] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0039.872] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0039.872] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0039.872] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0039.872] lstrlenW (lpString="DcomLaunch") returned 10
	[0039.872] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0039.872] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0039.872] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0039.872] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0039.872] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0039.872] lstrlenW (lpString="Dhcp") returned 4
	[0039.872] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0039.872] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0039.872] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0039.872] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0039.872] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0039.872] lstrlenW (lpString="Dnscache") returned 8
	[0039.872] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0039.872] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0039.872] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0039.872] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0039.872] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0039.872] lstrlenW (lpString="DPS") returned 3
	[0039.872] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0039.872] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0039.872] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0039.872] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0039.872] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0039.873] lstrlenW (lpString="eventlog") returned 8
	[0039.873] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0039.873] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0039.873] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0039.873] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0039.873] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0039.873] lstrlenW (lpString="EventSystem") returned 11
	[0039.873] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0039.873] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0039.873] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0039.873] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0039.873] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0039.873] lstrlenW (lpString="gpsvc") returned 5
	[0039.873] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0039.873] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0039.873] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0039.873] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0039.873] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0039.873] lstrlenW (lpString="iphlpsvc") returned 8
	[0039.873] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0039.873] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0039.873] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0039.873] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0039.873] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0039.873] lstrlenW (lpString="LanmanServer") returned 12
	[0039.873] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0039.873] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0039.873] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0039.873] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0039.873] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0039.873] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0039.873] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0039.873] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0039.874] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0039.874] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0039.874] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0039.874] lstrlenW (lpString="lmhosts") returned 7
	[0039.874] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0039.874] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0039.874] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0039.874] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0039.874] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0039.874] lstrlenW (lpString="MMCSS") returned 5
	[0039.874] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0039.874] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0039.874] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0039.874] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0039.874] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0039.874] lstrlenW (lpString="MpsSvc") returned 6
	[0039.874] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0039.874] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0039.874] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0039.874] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0039.874] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0039.874] lstrlenW (lpString="Netman") returned 6
	[0039.874] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0039.874] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0039.874] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0039.874] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0039.874] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0039.874] lstrlenW (lpString="netprofm") returned 8
	[0039.874] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0039.874] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0039.874] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0039.874] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0039.874] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0039.875] lstrlenW (lpString="NlaSvc") returned 6
	[0039.875] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0039.875] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0039.875] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0039.875] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0039.875] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0039.875] lstrlenW (lpString="nsi") returned 3
	[0039.875] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0039.875] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0039.875] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0039.875] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0039.875] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0039.875] lstrlenW (lpString="PcaSvc") returned 6
	[0039.875] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0039.875] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0039.875] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0039.875] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0039.875] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0039.875] lstrlenW (lpString="PlugPlay") returned 8
	[0039.875] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0039.875] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0039.875] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0039.875] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0039.875] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0039.875] lstrlenW (lpString="Power") returned 5
	[0039.875] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0039.875] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0039.875] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0039.875] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0039.875] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0039.875] lstrlenW (lpString="ProfSvc") returned 7
	[0039.875] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0039.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0039.876] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0039.876] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0039.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0039.876] lstrlenW (lpString="RpcEptMapper") returned 12
	[0039.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0039.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0039.876] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0039.876] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0039.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0039.876] lstrlenW (lpString="RpcSs") returned 5
	[0039.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0039.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0039.876] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0039.876] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0039.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0039.876] lstrlenW (lpString="SamSs") returned 5
	[0039.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0039.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0039.876] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0039.876] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0039.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0039.876] lstrlenW (lpString="Schedule") returned 8
	[0039.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0039.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0039.876] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0039.876] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0039.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0039.876] lstrlenW (lpString="SENS") returned 4
	[0039.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0039.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0039.876] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0039.876] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0039.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0039.877] lstrlenW (lpString="ShellHWDetection") returned 16
	[0039.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0039.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0039.877] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0039.877] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0039.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0039.877] lstrlenW (lpString="Spooler") returned 7
	[0039.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0039.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0039.877] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0039.877] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0039.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0039.877] lstrlenW (lpString="SysMain") returned 7
	[0039.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0039.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0039.877] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0039.877] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0039.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0039.877] lstrlenW (lpString="Themes") returned 6
	[0039.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0039.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0039.877] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0039.877] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0039.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0039.877] lstrlenW (lpString="TrkWks") returned 6
	[0039.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0039.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0039.877] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0039.877] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0039.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0039.877] lstrlenW (lpString="UxSms") returned 5
	[0039.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0039.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0039.878] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0039.878] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0039.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0039.878] lstrlenW (lpString="VSS") returned 3
	[0039.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0039.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0039.878] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0039.878] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0039.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0039.878] lstrlenW (lpString="WdiServiceHost") returned 14
	[0039.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0039.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0039.878] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0039.878] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0039.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0039.878] lstrlenW (lpString="WdiSystemHost") returned 13
	[0039.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0039.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0039.878] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0039.878] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0039.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0039.878] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0039.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0039.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0039.878] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0039.878] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0039.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0039.878] lstrlenW (lpString="Winmgmt") returned 7
	[0039.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0039.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0039.878] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0039.878] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0039.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0039.879] lstrlenW (lpString="WPDBusEnum") returned 10
	[0039.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0039.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0039.879] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0039.879] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0039.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0039.879] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x82250c8 | out: hHeap=0x5350000) returned 1
	[0039.879] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ac
	[0039.881] Process32FirstW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0039.882] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0039.883] lstrlenW (lpString="System") returned 6
	[0039.883] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0039.883] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0039.883] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0039.883] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0039.883] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0039.883] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0039.883] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0039.883] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0039.883] lstrlenW (lpString="smss.exe") returned 8
	[0039.883] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0039.884] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0039.884] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0039.884] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0039.884] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0039.884] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0039.884] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0039.884] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0039.884] lstrlenW (lpString="csrss.exe") returned 9
	[0039.884] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0039.884] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0039.884] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0039.884] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0039.884] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0039.885] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0039.885] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0039.885] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0039.885] lstrlenW (lpString="wininit.exe") returned 11
	[0039.885] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0039.885] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0039.885] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0039.885] lstrcmpiW (lpString1="postgres.exe", lpString2="wininit.exe") returned -1
	[0039.885] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="wininit.exe") returned -1
	[0039.885] lstrcmpiW (lpString1="mysqld.exe", lpString2="wininit.exe") returned -1
	[0039.885] lstrcmpiW (lpString1="sqlservr.exe", lpString2="wininit.exe") returned -1
	[0039.885] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0039.886] lstrlenW (lpString="csrss.exe") returned 9
	[0039.886] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0039.886] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0039.887] lstrlenW (lpString="winlogon.exe") returned 12
	[0039.887] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0039.888] lstrlenW (lpString="services.exe") returned 12
	[0039.888] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0039.888] lstrlenW (lpString="lsass.exe") returned 9
	[0039.888] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0039.889] lstrlenW (lpString="lsm.exe") returned 7
	[0039.889] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0039.890] lstrlenW (lpString="svchost.exe") returned 11
	[0039.890] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0039.890] lstrlenW (lpString="svchost.exe") returned 11
	[0039.890] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0039.891] lstrlenW (lpString="svchost.exe") returned 11
	[0039.891] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0039.892] lstrlenW (lpString="svchost.exe") returned 11
	[0039.892] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2b, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0039.892] lstrlenW (lpString="svchost.exe") returned 11
	[0039.892] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0039.893] lstrlenW (lpString="audiodg.exe") returned 11
	[0039.893] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0039.894] lstrlenW (lpString="svchost.exe") returned 11
	[0039.894] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0039.895] lstrlenW (lpString="svchost.exe") returned 11
	[0039.895] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0039.895] lstrlenW (lpString="dwm.exe") returned 7
	[0039.895] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0039.896] lstrlenW (lpString="explorer.exe") returned 12
	[0039.896] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0039.897] lstrlenW (lpString="spoolsv.exe") returned 11
	[0039.897] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0039.898] lstrlenW (lpString="taskhost.exe") returned 12
	[0039.898] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0039.898] lstrlenW (lpString="svchost.exe") returned 11
	[0039.898] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0039.899] lstrlenW (lpString="taskeng.exe") returned 11
	[0039.899] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0039.900] lstrlenW (lpString="taskhost.exe") returned 12
	[0039.900] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0039.900] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0039.900] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0039.901] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0039.901] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0039.902] lstrlenW (lpString="possibilities.exe") returned 17
	[0039.902] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0039.902] lstrlenW (lpString="wilson.exe") returned 10
	[0039.903] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0039.903] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0039.903] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0039.904] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0039.904] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0039.905] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0039.905] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0039.905] lstrlenW (lpString="crisis.exe") returned 10
	[0039.905] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0039.906] lstrlenW (lpString="dramatically.exe") returned 16
	[0039.906] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0039.907] lstrlenW (lpString="rocket.exe") returned 10
	[0039.907] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0039.907] lstrlenW (lpString="warrant.exe") returned 11
	[0039.907] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0039.908] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0039.908] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0039.909] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0039.909] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0039.909] lstrlenW (lpString="israel.exe") returned 10
	[0039.909] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0039.910] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0039.910] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0039.911] lstrlenW (lpString="toxic chain.exe") returned 15
	[0039.911] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0039.911] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0039.911] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0039.912] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0039.912] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0040.088] lstrlenW (lpString="dllhost.exe") returned 11
	[0040.088] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0040.089] lstrlenW (lpString="dllhost.exe") returned 11
	[0040.089] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0040.090] lstrlenW (lpString="demo.exe") returned 8
	[0040.090] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0040.091] lstrlenW (lpString="cmd.exe") returned 7
	[0040.091] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0040.091] lstrlenW (lpString="conhost.exe") returned 11
	[0040.091] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0040.092] lstrlenW (lpString="vssadmin.exe") returned 12
	[0040.092] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0040.093] lstrlenW (lpString="VSSVC.exe") returned 9
	[0040.093] Process32NextW (in: hSnapshot=0x1ac, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 0
	[0040.093] CloseHandle (hObject=0x1ac) returned 1
	[0040.093] Sleep (dwMilliseconds=0x1f4) 
	[0040.701] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e7600
	[0040.702] EnumServicesStatusExW (in: hSCManager=0x53e7600, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0040.702] GetLastError () returned 0xea
	[0040.702] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x123e) returned 0x82250c8
	[0040.702] EnumServicesStatusExW (in: hSCManager=0x53e7600, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x82250c8, cbBufSize=0x123e, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x82250c8, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0040.703] CloseServiceHandle (hSCObject=0x53e7600) returned 1
	[0040.703] lstrlenW (lpString="Appinfo") returned 7
	[0040.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0040.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0040.704] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0040.704] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0040.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0040.704] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0040.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0040.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0040.704] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0040.704] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0040.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0040.704] lstrlenW (lpString="AudioSrv") returned 8
	[0040.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0040.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0040.704] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0040.704] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0040.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0040.704] lstrlenW (lpString="BFE") returned 3
	[0040.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0040.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0040.704] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0040.704] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0040.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0040.704] lstrlenW (lpString="CryptSvc") returned 8
	[0040.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0040.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0040.704] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0040.704] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0040.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0040.705] lstrlenW (lpString="CscService") returned 10
	[0040.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0040.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0040.705] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0040.705] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0040.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0040.705] lstrlenW (lpString="DcomLaunch") returned 10
	[0040.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0040.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0040.705] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0040.705] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0040.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0040.705] lstrlenW (lpString="Dhcp") returned 4
	[0040.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0040.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0040.705] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0040.705] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0040.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0040.705] lstrlenW (lpString="Dnscache") returned 8
	[0040.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0040.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0040.705] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0040.705] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0040.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0040.705] lstrlenW (lpString="DPS") returned 3
	[0040.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0040.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0040.706] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0040.706] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0040.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0040.706] lstrlenW (lpString="eventlog") returned 8
	[0040.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0040.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0040.706] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0040.706] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0040.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0040.706] lstrlenW (lpString="EventSystem") returned 11
	[0040.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0040.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0040.706] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0040.706] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0040.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0040.706] lstrlenW (lpString="gpsvc") returned 5
	[0040.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0040.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0040.706] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0040.706] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0040.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0040.706] lstrlenW (lpString="iphlpsvc") returned 8
	[0040.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0040.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0040.706] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0040.706] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0040.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0040.707] lstrlenW (lpString="LanmanServer") returned 12
	[0040.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0040.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0040.707] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0040.707] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0040.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0040.707] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0040.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0040.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0040.707] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0040.707] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0040.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0040.707] lstrlenW (lpString="lmhosts") returned 7
	[0040.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0040.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0040.707] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0040.707] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0040.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0040.707] lstrlenW (lpString="MMCSS") returned 5
	[0040.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0040.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0040.707] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0040.707] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0040.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0040.707] lstrlenW (lpString="MpsSvc") returned 6
	[0040.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0040.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0040.708] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0040.708] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0040.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0040.708] lstrlenW (lpString="Netman") returned 6
	[0040.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0040.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0040.708] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0040.708] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0040.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0040.708] lstrlenW (lpString="netprofm") returned 8
	[0040.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0040.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0040.708] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0040.708] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0040.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0040.708] lstrlenW (lpString="NlaSvc") returned 6
	[0040.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0040.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0040.708] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0040.708] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0040.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0040.708] lstrlenW (lpString="nsi") returned 3
	[0040.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0040.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0040.708] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0040.708] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0040.709] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0040.709] lstrlenW (lpString="PcaSvc") returned 6
	[0040.709] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0040.709] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0040.709] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0040.709] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0040.709] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0040.709] lstrlenW (lpString="PlugPlay") returned 8
	[0040.709] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0040.709] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0040.709] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0040.709] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0040.709] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0040.709] lstrlenW (lpString="Power") returned 5
	[0040.709] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0040.709] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0040.709] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0040.709] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0040.709] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0040.709] lstrlenW (lpString="ProfSvc") returned 7
	[0040.709] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0040.709] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0040.709] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0040.709] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0040.709] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0040.709] lstrlenW (lpString="RpcEptMapper") returned 12
	[0040.709] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0040.710] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0040.710] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0040.710] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0040.710] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0040.710] lstrlenW (lpString="RpcSs") returned 5
	[0040.710] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0040.710] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0040.710] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0040.710] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0040.710] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0040.710] lstrlenW (lpString="SamSs") returned 5
	[0040.710] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0040.710] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0040.710] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0040.710] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0040.710] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0040.710] lstrlenW (lpString="Schedule") returned 8
	[0040.710] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0040.710] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0040.710] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0040.710] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0040.710] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0040.710] lstrlenW (lpString="SENS") returned 4
	[0040.710] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0040.710] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0040.710] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0040.710] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0040.710] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0040.711] lstrlenW (lpString="ShellHWDetection") returned 16
	[0040.711] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0040.711] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0040.711] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0040.711] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0040.711] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0040.711] lstrlenW (lpString="Spooler") returned 7
	[0040.711] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0040.711] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0040.711] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0040.711] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0040.711] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0040.711] lstrlenW (lpString="SysMain") returned 7
	[0040.711] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0040.711] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0040.711] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0040.711] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0040.711] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0040.711] lstrlenW (lpString="Themes") returned 6
	[0040.711] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0040.711] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0040.711] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0040.711] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0040.711] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0040.711] lstrlenW (lpString="TrkWks") returned 6
	[0040.711] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0040.712] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0040.712] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0040.712] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0040.712] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0040.712] lstrlenW (lpString="UxSms") returned 5
	[0040.712] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0040.712] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0040.712] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0040.712] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0040.712] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0040.712] lstrlenW (lpString="VSS") returned 3
	[0040.712] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0040.712] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0040.712] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0040.712] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0040.712] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0040.712] lstrlenW (lpString="WdiServiceHost") returned 14
	[0040.712] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0040.712] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0040.712] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0040.712] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0040.712] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0040.712] lstrlenW (lpString="WdiSystemHost") returned 13
	[0040.712] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0040.712] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0040.712] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0040.712] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0040.713] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0040.713] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0040.713] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0040.713] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0040.713] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0040.713] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0040.713] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0040.713] lstrlenW (lpString="Winmgmt") returned 7
	[0040.713] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0040.713] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0040.713] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0040.713] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0040.713] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0040.713] lstrlenW (lpString="WPDBusEnum") returned 10
	[0040.713] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0040.713] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0040.713] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0040.713] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0040.713] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0040.713] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x82250c8 | out: hHeap=0x5350000) returned 1
	[0040.714] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f8
	[0040.717] Process32FirstW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0040.717] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0040.718] lstrlenW (lpString="System") returned 6
	[0040.718] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0040.718] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0040.718] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0040.719] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0040.719] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0040.719] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0040.719] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0040.719] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0040.720] lstrlenW (lpString="smss.exe") returned 8
	[0040.720] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0040.720] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0040.720] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0040.720] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0040.720] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0040.720] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0040.720] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0040.720] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0040.721] lstrlenW (lpString="csrss.exe") returned 9
	[0040.721] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0040.721] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0040.721] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0040.721] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0040.721] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0040.721] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0040.721] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0040.721] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0040.722] lstrlenW (lpString="wininit.exe") returned 11
	[0040.722] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0040.722] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0040.722] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0040.722] lstrcmpiW (lpString1="postgres.exe", lpString2="wininit.exe") returned -1
	[0040.722] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="wininit.exe") returned -1
	[0040.722] lstrcmpiW (lpString1="mysqld.exe", lpString2="wininit.exe") returned -1
	[0040.722] lstrcmpiW (lpString1="sqlservr.exe", lpString2="wininit.exe") returned -1
	[0040.722] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0040.723] lstrlenW (lpString="csrss.exe") returned 9
	[0040.723] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0040.723] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0040.724] lstrlenW (lpString="winlogon.exe") returned 12
	[0040.725] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0040.725] lstrlenW (lpString="services.exe") returned 12
	[0040.725] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0040.726] lstrlenW (lpString="lsass.exe") returned 9
	[0040.726] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0040.727] lstrlenW (lpString="lsm.exe") returned 7
	[0040.727] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0040.728] lstrlenW (lpString="svchost.exe") returned 11
	[0040.728] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0040.729] lstrlenW (lpString="svchost.exe") returned 11
	[0040.729] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0040.730] lstrlenW (lpString="svchost.exe") returned 11
	[0040.730] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0040.731] lstrlenW (lpString="svchost.exe") returned 11
	[0040.731] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0040.732] lstrlenW (lpString="svchost.exe") returned 11
	[0040.732] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0040.733] lstrlenW (lpString="audiodg.exe") returned 11
	[0040.733] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0040.734] lstrlenW (lpString="svchost.exe") returned 11
	[0040.734] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0040.735] lstrlenW (lpString="svchost.exe") returned 11
	[0040.735] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0040.735] lstrlenW (lpString="dwm.exe") returned 7
	[0040.736] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0040.736] lstrlenW (lpString="explorer.exe") returned 12
	[0040.736] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0040.737] lstrlenW (lpString="spoolsv.exe") returned 11
	[0040.737] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0040.738] lstrlenW (lpString="taskhost.exe") returned 12
	[0040.738] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.161] lstrlenW (lpString="svchost.exe") returned 11
	[0041.161] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0041.162] lstrlenW (lpString="taskeng.exe") returned 11
	[0041.162] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0041.162] lstrlenW (lpString="taskhost.exe") returned 12
	[0041.162] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0041.163] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0041.163] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0041.164] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0041.164] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0041.164] lstrlenW (lpString="possibilities.exe") returned 17
	[0041.164] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0041.165] lstrlenW (lpString="wilson.exe") returned 10
	[0041.165] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0041.166] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0041.166] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0041.167] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0041.167] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0041.167] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0041.167] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0041.168] lstrlenW (lpString="crisis.exe") returned 10
	[0041.168] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0041.169] lstrlenW (lpString="dramatically.exe") returned 16
	[0041.169] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0041.169] lstrlenW (lpString="rocket.exe") returned 10
	[0041.169] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0041.170] lstrlenW (lpString="warrant.exe") returned 11
	[0041.170] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0041.171] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0041.171] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0041.171] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0041.172] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0041.172] lstrlenW (lpString="israel.exe") returned 10
	[0041.172] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0041.173] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0041.173] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0041.174] lstrlenW (lpString="toxic chain.exe") returned 15
	[0041.174] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0041.174] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0041.174] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0041.175] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0041.175] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0041.176] lstrlenW (lpString="dllhost.exe") returned 11
	[0041.176] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0041.177] lstrlenW (lpString="demo.exe") returned 8
	[0041.177] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0041.177] lstrlenW (lpString="cmd.exe") returned 7
	[0041.177] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0041.178] lstrlenW (lpString="conhost.exe") returned 11
	[0041.178] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0041.179] lstrlenW (lpString="vssadmin.exe") returned 12
	[0041.179] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0041.179] lstrlenW (lpString="VSSVC.exe") returned 9
	[0041.180] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 0
	[0041.180] CloseHandle (hObject=0x1f8) returned 1
	[0041.180] Sleep (dwMilliseconds=0x1f4) 
	[0041.976] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e76c8
	[0041.977] EnumServicesStatusExW (in: hSCManager=0x53e76c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0041.977] GetLastError () returned 0xea
	[0041.977] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x123e) returned 0x8cf50f8
	[0041.978] EnumServicesStatusExW (in: hSCManager=0x53e76c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8cf50f8, cbBufSize=0x123e, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8cf50f8, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0041.978] CloseServiceHandle (hSCObject=0x53e76c8) returned 1
	[0041.979] lstrlenW (lpString="Appinfo") returned 7
	[0041.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0041.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0041.979] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0041.979] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0041.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0041.979] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0041.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0041.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0041.979] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0041.979] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0041.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0041.979] lstrlenW (lpString="AudioSrv") returned 8
	[0041.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0041.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0041.979] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0041.979] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0041.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0041.979] lstrlenW (lpString="BFE") returned 3
	[0041.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0041.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0041.979] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0041.979] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0041.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0041.979] lstrlenW (lpString="CryptSvc") returned 8
	[0041.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0041.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0041.979] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0041.979] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0041.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0041.980] lstrlenW (lpString="CscService") returned 10
	[0041.980] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0041.980] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0041.980] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0041.980] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0041.980] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0041.980] lstrlenW (lpString="DcomLaunch") returned 10
	[0041.980] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0041.980] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0041.980] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0041.980] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0041.980] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0041.980] lstrlenW (lpString="Dhcp") returned 4
	[0041.980] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0041.980] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0041.980] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0041.980] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0041.980] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0041.980] lstrlenW (lpString="Dnscache") returned 8
	[0041.980] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0041.980] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0041.980] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0041.980] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0041.980] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0041.980] lstrlenW (lpString="DPS") returned 3
	[0041.980] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0041.980] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0041.980] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0041.980] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0041.980] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0041.980] lstrlenW (lpString="eventlog") returned 8
	[0041.980] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0041.980] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0041.981] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0041.981] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0041.981] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0041.981] lstrlenW (lpString="EventSystem") returned 11
	[0041.981] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0041.981] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0041.981] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0041.981] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0041.981] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0041.981] lstrlenW (lpString="gpsvc") returned 5
	[0041.981] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0041.981] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0041.981] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0041.981] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0041.981] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0041.981] lstrlenW (lpString="iphlpsvc") returned 8
	[0041.981] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0041.981] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0041.981] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0041.981] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0041.981] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0041.981] lstrlenW (lpString="LanmanServer") returned 12
	[0041.981] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0041.981] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0041.981] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0041.981] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0041.981] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0041.981] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0041.981] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0041.981] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0041.981] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0041.981] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0041.981] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0041.981] lstrlenW (lpString="lmhosts") returned 7
	[0041.982] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0041.982] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0041.982] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0041.982] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0041.982] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0041.982] lstrlenW (lpString="MMCSS") returned 5
	[0041.982] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0041.982] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0041.982] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0041.982] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0041.982] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0041.982] lstrlenW (lpString="MpsSvc") returned 6
	[0041.982] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0041.982] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0041.982] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0041.982] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0041.982] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0041.982] lstrlenW (lpString="Netman") returned 6
	[0041.982] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0041.982] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0041.982] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0041.982] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0041.982] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0041.982] lstrlenW (lpString="netprofm") returned 8
	[0041.982] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0041.982] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0041.982] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0041.982] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0041.982] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0041.982] lstrlenW (lpString="NlaSvc") returned 6
	[0041.982] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0041.982] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0041.982] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0041.982] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0041.983] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0041.983] lstrlenW (lpString="nsi") returned 3
	[0041.983] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0041.983] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0041.983] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0041.983] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0041.983] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0041.983] lstrlenW (lpString="PcaSvc") returned 6
	[0041.983] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0041.983] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0041.983] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0041.983] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0041.983] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0041.983] lstrlenW (lpString="PlugPlay") returned 8
	[0041.983] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0041.983] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0041.983] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0041.983] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0041.983] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0041.983] lstrlenW (lpString="Power") returned 5
	[0041.983] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0041.983] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0041.983] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0041.983] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0041.983] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0041.983] lstrlenW (lpString="ProfSvc") returned 7
	[0041.983] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0041.983] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0041.983] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0041.983] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0041.983] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0041.983] lstrlenW (lpString="RpcEptMapper") returned 12
	[0041.983] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0041.984] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0041.984] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0041.984] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0041.984] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0041.984] lstrlenW (lpString="RpcSs") returned 5
	[0041.984] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0041.984] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0041.984] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0041.984] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0041.984] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0041.984] lstrlenW (lpString="SamSs") returned 5
	[0041.984] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0041.984] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0041.984] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0041.984] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0041.984] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0041.984] lstrlenW (lpString="Schedule") returned 8
	[0041.984] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0041.984] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0041.984] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0041.984] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0041.984] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0041.984] lstrlenW (lpString="SENS") returned 4
	[0041.984] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0041.984] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0041.984] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0041.984] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0041.984] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0041.984] lstrlenW (lpString="ShellHWDetection") returned 16
	[0041.984] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0041.984] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0041.984] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0041.985] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0041.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0041.985] lstrlenW (lpString="Spooler") returned 7
	[0041.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0041.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0041.985] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0041.985] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0041.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0041.985] lstrlenW (lpString="SysMain") returned 7
	[0041.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0041.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0041.985] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0041.985] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0041.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0041.985] lstrlenW (lpString="Themes") returned 6
	[0041.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0041.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0041.985] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0041.985] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0041.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0041.985] lstrlenW (lpString="TrkWks") returned 6
	[0041.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0041.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0041.985] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0041.985] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0041.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0041.985] lstrlenW (lpString="UxSms") returned 5
	[0041.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0041.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0041.985] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0041.985] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0041.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0041.985] lstrlenW (lpString="VSS") returned 3
	[0041.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0041.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0041.986] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0041.986] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0041.986] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0041.986] lstrlenW (lpString="WdiServiceHost") returned 14
	[0041.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0041.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0041.986] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0041.986] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0041.986] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0041.986] lstrlenW (lpString="WdiSystemHost") returned 13
	[0041.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0041.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0041.986] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0041.986] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0041.986] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0041.986] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0041.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0041.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0041.986] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0041.986] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0041.986] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0041.986] lstrlenW (lpString="Winmgmt") returned 7
	[0041.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0041.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0041.986] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0041.986] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0041.986] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0041.986] lstrlenW (lpString="WPDBusEnum") returned 10
	[0041.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0041.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0041.986] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0041.986] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0041.987] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0041.987] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cf50f8 | out: hHeap=0x5350000) returned 1
	[0041.987] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1bc
	[0041.989] Process32FirstW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0041.990] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0041.990] lstrlenW (lpString="System") returned 6
	[0041.990] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0041.990] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0041.990] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0041.991] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0041.991] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0041.991] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0041.991] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0041.991] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0041.991] lstrlenW (lpString="smss.exe") returned 8
	[0041.991] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0041.991] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0041.991] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0041.991] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0041.991] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0041.992] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0041.992] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0041.992] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0041.992] lstrlenW (lpString="csrss.exe") returned 9
	[0041.992] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0041.992] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0041.992] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0041.992] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0041.992] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0041.992] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0041.992] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0041.992] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0041.993] lstrlenW (lpString="wininit.exe") returned 11
	[0041.993] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0041.993] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0041.993] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0041.993] lstrcmpiW (lpString1="postgres.exe", lpString2="wininit.exe") returned -1
	[0041.993] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="wininit.exe") returned -1
	[0041.993] lstrcmpiW (lpString1="mysqld.exe", lpString2="wininit.exe") returned -1
	[0041.993] lstrcmpiW (lpString1="sqlservr.exe", lpString2="wininit.exe") returned -1
	[0041.993] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0041.994] lstrlenW (lpString="csrss.exe") returned 9
	[0041.994] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0041.994] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0041.995] lstrlenW (lpString="winlogon.exe") returned 12
	[0041.995] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0041.996] lstrlenW (lpString="services.exe") returned 12
	[0041.996] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0041.996] lstrlenW (lpString="lsass.exe") returned 9
	[0041.996] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0041.997] lstrlenW (lpString="lsm.exe") returned 7
	[0041.997] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.998] lstrlenW (lpString="svchost.exe") returned 11
	[0041.998] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.998] lstrlenW (lpString="svchost.exe") returned 11
	[0041.998] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.999] lstrlenW (lpString="svchost.exe") returned 11
	[0041.999] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.000] lstrlenW (lpString="svchost.exe") returned 11
	[0042.000] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.001] lstrlenW (lpString="svchost.exe") returned 11
	[0042.001] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0042.001] lstrlenW (lpString="audiodg.exe") returned 11
	[0042.001] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.002] lstrlenW (lpString="svchost.exe") returned 11
	[0042.002] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.003] lstrlenW (lpString="svchost.exe") returned 11
	[0042.003] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0042.004] lstrlenW (lpString="dwm.exe") returned 7
	[0042.004] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0042.004] lstrlenW (lpString="explorer.exe") returned 12
	[0042.004] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0042.005] lstrlenW (lpString="spoolsv.exe") returned 11
	[0042.005] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0042.006] lstrlenW (lpString="taskhost.exe") returned 12
	[0042.006] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.007] lstrlenW (lpString="svchost.exe") returned 11
	[0042.007] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0042.007] lstrlenW (lpString="taskeng.exe") returned 11
	[0042.007] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0042.008] lstrlenW (lpString="taskhost.exe") returned 12
	[0042.008] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0042.009] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0042.009] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0042.009] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0042.009] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0042.010] lstrlenW (lpString="possibilities.exe") returned 17
	[0042.010] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0042.011] lstrlenW (lpString="wilson.exe") returned 10
	[0042.011] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0042.012] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0042.012] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0042.012] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0042.012] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0042.086] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0042.086] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0042.087] lstrlenW (lpString="crisis.exe") returned 10
	[0042.087] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0042.087] lstrlenW (lpString="dramatically.exe") returned 16
	[0042.087] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0042.088] lstrlenW (lpString="rocket.exe") returned 10
	[0042.088] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0042.089] lstrlenW (lpString="warrant.exe") returned 11
	[0042.089] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0042.091] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0042.091] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0042.092] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0042.092] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0042.093] lstrlenW (lpString="israel.exe") returned 10
	[0042.093] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0042.093] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0042.093] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0042.094] lstrlenW (lpString="toxic chain.exe") returned 15
	[0042.094] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0042.095] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0042.095] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0042.096] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0042.096] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0042.096] lstrlenW (lpString="demo.exe") returned 8
	[0042.096] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0042.097] lstrlenW (lpString="cmd.exe") returned 7
	[0042.097] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0042.098] lstrlenW (lpString="conhost.exe") returned 11
	[0042.098] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0042.099] lstrlenW (lpString="vssadmin.exe") returned 12
	[0042.099] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0042.099] lstrlenW (lpString="VSSVC.exe") returned 9
	[0042.099] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 0
	[0042.100] CloseHandle (hObject=0x1bc) returned 1
	[0042.100] Sleep (dwMilliseconds=0x1f4) 
	[0042.963] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e76c8
	[0042.963] EnumServicesStatusExW (in: hSCManager=0x53e76c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0042.964] GetLastError () returned 0xea
	[0042.964] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8cf50f8
	[0042.964] EnumServicesStatusExW (in: hSCManager=0x53e76c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8cf50f8, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8cf50f8, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0042.964] CloseServiceHandle (hSCObject=0x53e76c8) returned 1
	[0042.965] lstrlenW (lpString="Appinfo") returned 7
	[0042.965] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0042.965] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0042.965] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0042.965] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0042.965] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0042.965] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0042.965] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0042.965] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0042.965] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0042.965] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0042.965] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0042.965] lstrlenW (lpString="AudioSrv") returned 8
	[0042.965] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0042.965] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0042.965] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0042.965] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0042.965] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0042.965] lstrlenW (lpString="BFE") returned 3
	[0042.965] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0042.965] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0042.965] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0042.965] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0042.965] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0042.965] lstrlenW (lpString="CryptSvc") returned 8
	[0042.965] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0042.965] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0042.965] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0042.965] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0042.965] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0042.966] lstrlenW (lpString="CscService") returned 10
	[0042.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0042.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0042.966] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0042.966] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0042.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0042.966] lstrlenW (lpString="DcomLaunch") returned 10
	[0042.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0042.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0042.966] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0042.966] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0042.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0042.966] lstrlenW (lpString="Dhcp") returned 4
	[0042.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0042.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0042.966] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0042.966] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0042.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0042.966] lstrlenW (lpString="Dnscache") returned 8
	[0042.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0042.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0042.966] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0042.966] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0042.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0042.966] lstrlenW (lpString="DPS") returned 3
	[0042.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0042.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0042.966] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0042.966] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0042.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0042.966] lstrlenW (lpString="eventlog") returned 8
	[0042.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0042.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0042.967] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0042.967] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0042.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0042.967] lstrlenW (lpString="EventSystem") returned 11
	[0042.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0042.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0042.967] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0042.967] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0042.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0042.967] lstrlenW (lpString="gpsvc") returned 5
	[0042.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0042.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0042.967] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0042.967] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0042.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0042.967] lstrlenW (lpString="iphlpsvc") returned 8
	[0042.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0042.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0042.967] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0042.967] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0042.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0042.967] lstrlenW (lpString="LanmanServer") returned 12
	[0042.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0042.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0042.967] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0042.967] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0042.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0042.967] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0042.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0042.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0042.967] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0042.967] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0042.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0042.968] lstrlenW (lpString="lmhosts") returned 7
	[0042.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0042.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0042.968] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0042.968] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0042.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0042.968] lstrlenW (lpString="MMCSS") returned 5
	[0042.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0042.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0042.968] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0042.968] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0042.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0042.968] lstrlenW (lpString="MpsSvc") returned 6
	[0042.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0042.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0042.968] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0042.968] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0042.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0042.968] lstrlenW (lpString="Netman") returned 6
	[0042.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0042.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0042.968] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0042.968] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0042.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0042.968] lstrlenW (lpString="netprofm") returned 8
	[0042.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0042.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0042.968] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0042.968] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0042.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0042.968] lstrlenW (lpString="NlaSvc") returned 6
	[0042.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0042.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0042.968] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0042.969] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0042.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0042.969] lstrlenW (lpString="nsi") returned 3
	[0042.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0042.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0042.969] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0042.969] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0042.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0042.969] lstrlenW (lpString="PcaSvc") returned 6
	[0042.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0042.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0042.969] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0042.969] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0042.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0042.969] lstrlenW (lpString="PlugPlay") returned 8
	[0042.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0042.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0042.969] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0042.969] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0042.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0042.969] lstrlenW (lpString="Power") returned 5
	[0042.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0042.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0042.969] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0042.969] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0042.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0042.969] lstrlenW (lpString="ProfSvc") returned 7
	[0042.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0042.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0042.969] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0042.969] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0042.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0042.970] lstrlenW (lpString="RpcEptMapper") returned 12
	[0042.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0042.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0042.970] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0042.970] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0042.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0042.970] lstrlenW (lpString="RpcSs") returned 5
	[0042.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0042.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0042.970] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0042.970] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0042.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0042.970] lstrlenW (lpString="SamSs") returned 5
	[0042.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0042.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0042.970] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0042.970] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0042.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0042.970] lstrlenW (lpString="Schedule") returned 8
	[0042.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0042.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0042.970] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0042.970] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0042.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0042.970] lstrlenW (lpString="SENS") returned 4
	[0042.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0042.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0042.970] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0042.970] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0042.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0042.971] lstrlenW (lpString="ShellHWDetection") returned 16
	[0042.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0042.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0042.971] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0042.971] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0042.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0042.971] lstrlenW (lpString="Spooler") returned 7
	[0042.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0042.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0042.971] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0042.971] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0042.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0042.971] lstrlenW (lpString="swprv") returned 5
	[0042.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0042.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0042.971] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0042.971] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0042.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0042.971] lstrlenW (lpString="SysMain") returned 7
	[0042.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0042.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0042.971] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0042.971] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0042.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0042.971] lstrlenW (lpString="Themes") returned 6
	[0042.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0042.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0042.971] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0042.971] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0042.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0042.971] lstrlenW (lpString="TrkWks") returned 6
	[0042.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0042.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0042.972] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0042.972] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0042.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0042.972] lstrlenW (lpString="UxSms") returned 5
	[0042.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0042.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0042.972] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0042.972] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0042.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0042.972] lstrlenW (lpString="VSS") returned 3
	[0042.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0042.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0042.972] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0042.972] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0042.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0042.972] lstrlenW (lpString="WdiServiceHost") returned 14
	[0042.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0042.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0042.972] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0042.972] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0042.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0042.972] lstrlenW (lpString="WdiSystemHost") returned 13
	[0042.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0042.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0042.972] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0042.972] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0042.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0042.972] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0042.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0042.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0042.972] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0042.972] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0042.973] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0042.973] lstrlenW (lpString="Winmgmt") returned 7
	[0042.973] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0042.973] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0042.973] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0042.973] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0042.973] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0042.973] lstrlenW (lpString="WPDBusEnum") returned 10
	[0042.973] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0042.973] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0042.973] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0042.973] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0042.973] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0042.973] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cf50f8 | out: hHeap=0x5350000) returned 1
	[0042.973] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x214
	[0042.975] Process32FirstW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0042.976] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0042.977] lstrlenW (lpString="System") returned 6
	[0042.977] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0042.977] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0042.977] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0042.977] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0042.977] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0042.977] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0042.977] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0042.977] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0042.978] lstrlenW (lpString="smss.exe") returned 8
	[0042.978] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0042.978] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0042.978] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0042.978] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0042.978] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0042.978] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0042.978] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0042.978] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0042.979] lstrlenW (lpString="csrss.exe") returned 9
	[0042.979] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0042.979] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0042.979] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0042.979] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0042.979] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0042.979] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0042.979] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0042.979] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0042.980] lstrlenW (lpString="wininit.exe") returned 11
	[0042.980] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0042.980] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0042.980] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0042.980] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0042.980] lstrlenW (lpString="csrss.exe") returned 9
	[0042.980] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0042.981] lstrlenW (lpString="winlogon.exe") returned 12
	[0042.981] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0042.982] lstrlenW (lpString="services.exe") returned 12
	[0042.982] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0042.983] lstrlenW (lpString="lsass.exe") returned 9
	[0042.983] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0042.983] lstrlenW (lpString="lsm.exe") returned 7
	[0042.983] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.984] lstrlenW (lpString="svchost.exe") returned 11
	[0042.984] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.985] lstrlenW (lpString="svchost.exe") returned 11
	[0042.985] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.986] lstrlenW (lpString="svchost.exe") returned 11
	[0042.986] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.986] lstrlenW (lpString="svchost.exe") returned 11
	[0042.986] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.987] lstrlenW (lpString="svchost.exe") returned 11
	[0042.987] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0042.988] lstrlenW (lpString="audiodg.exe") returned 11
	[0042.988] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.989] lstrlenW (lpString="svchost.exe") returned 11
	[0042.989] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.989] lstrlenW (lpString="svchost.exe") returned 11
	[0042.989] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0042.990] lstrlenW (lpString="dwm.exe") returned 7
	[0042.990] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0042.991] lstrlenW (lpString="explorer.exe") returned 12
	[0042.991] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0042.991] lstrlenW (lpString="spoolsv.exe") returned 11
	[0042.991] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0042.992] lstrlenW (lpString="taskhost.exe") returned 12
	[0042.992] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0042.993] lstrlenW (lpString="svchost.exe") returned 11
	[0042.993] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0042.994] lstrlenW (lpString="taskeng.exe") returned 11
	[0042.994] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0042.994] lstrlenW (lpString="taskhost.exe") returned 12
	[0042.994] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0042.995] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0042.995] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0042.996] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0042.996] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0042.996] lstrlenW (lpString="possibilities.exe") returned 17
	[0042.996] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0042.997] lstrlenW (lpString="wilson.exe") returned 10
	[0042.997] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0042.998] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0042.998] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0042.999] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0042.999] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0043.092] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0043.093] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0043.093] lstrlenW (lpString="crisis.exe") returned 10
	[0043.093] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0043.094] lstrlenW (lpString="dramatically.exe") returned 16
	[0043.094] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0043.095] lstrlenW (lpString="rocket.exe") returned 10
	[0043.095] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0043.096] lstrlenW (lpString="warrant.exe") returned 11
	[0043.096] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0043.096] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0043.096] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0043.097] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0043.097] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0043.098] lstrlenW (lpString="israel.exe") returned 10
	[0043.098] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0043.099] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0043.099] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0043.099] lstrlenW (lpString="toxic chain.exe") returned 15
	[0043.099] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0043.100] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0043.100] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0043.101] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0043.101] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0043.101] lstrlenW (lpString="demo.exe") returned 8
	[0043.102] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0043.102] lstrlenW (lpString="cmd.exe") returned 7
	[0043.102] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0043.103] lstrlenW (lpString="conhost.exe") returned 11
	[0043.103] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0043.104] lstrlenW (lpString="vssadmin.exe") returned 12
	[0043.104] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0043.104] lstrlenW (lpString="VSSVC.exe") returned 9
	[0043.104] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.105] lstrlenW (lpString="svchost.exe") returned 11
	[0043.105] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0043.106] CloseHandle (hObject=0x214) returned 1
	[0043.106] Sleep (dwMilliseconds=0x1f4) 
	[0043.724] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e7768
	[0043.724] EnumServicesStatusExW (in: hSCManager=0x53e7768, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0043.725] GetLastError () returned 0xea
	[0043.725] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8e1d150
	[0043.725] EnumServicesStatusExW (in: hSCManager=0x53e7768, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8e1d150, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8e1d150, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0043.725] CloseServiceHandle (hSCObject=0x53e7768) returned 1
	[0043.726] lstrlenW (lpString="Appinfo") returned 7
	[0043.726] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0043.726] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0043.726] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0043.726] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0043.726] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0043.726] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0043.726] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0043.726] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0043.726] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0043.726] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0043.726] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0043.726] lstrlenW (lpString="AudioSrv") returned 8
	[0043.726] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0043.726] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0043.726] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0043.726] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0043.726] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0043.726] lstrlenW (lpString="BFE") returned 3
	[0043.726] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0043.726] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0043.726] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0043.726] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0043.726] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0043.726] lstrlenW (lpString="CryptSvc") returned 8
	[0043.726] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0043.726] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0043.726] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0043.726] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0043.726] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0043.726] lstrlenW (lpString="CscService") returned 10
	[0043.726] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0043.727] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0043.727] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0043.727] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0043.727] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0043.727] lstrlenW (lpString="DcomLaunch") returned 10
	[0043.727] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0043.727] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0043.727] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0043.727] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0043.727] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0043.727] lstrlenW (lpString="Dhcp") returned 4
	[0043.727] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0043.727] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0043.727] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0043.727] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0043.727] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0043.727] lstrlenW (lpString="Dnscache") returned 8
	[0043.727] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0043.727] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0043.727] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0043.727] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0043.727] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0043.727] lstrlenW (lpString="DPS") returned 3
	[0043.727] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0043.727] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0043.727] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0043.727] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0043.727] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0043.727] lstrlenW (lpString="eventlog") returned 8
	[0043.727] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0043.727] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0043.728] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0043.728] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0043.728] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0043.728] lstrlenW (lpString="EventSystem") returned 11
	[0043.728] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0043.728] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0043.728] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0043.728] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0043.728] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0043.728] lstrlenW (lpString="gpsvc") returned 5
	[0043.728] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0043.728] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0043.728] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0043.728] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0043.728] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0043.728] lstrlenW (lpString="iphlpsvc") returned 8
	[0043.728] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0043.728] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0043.728] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0043.728] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0043.728] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0043.728] lstrlenW (lpString="LanmanServer") returned 12
	[0043.728] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0043.728] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0043.728] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0043.728] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0043.728] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0043.728] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0043.728] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0043.728] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0043.728] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0043.728] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0043.728] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0043.729] lstrlenW (lpString="lmhosts") returned 7
	[0043.729] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0043.729] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0043.729] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0043.729] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0043.729] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0043.729] lstrlenW (lpString="MMCSS") returned 5
	[0043.729] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0043.729] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0043.729] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0043.729] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0043.729] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0043.729] lstrlenW (lpString="MpsSvc") returned 6
	[0043.729] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0043.729] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0043.729] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0043.729] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0043.729] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0043.729] lstrlenW (lpString="Netman") returned 6
	[0043.729] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0043.729] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0043.729] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0043.729] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0043.729] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0043.729] lstrlenW (lpString="netprofm") returned 8
	[0043.729] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0043.729] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0043.729] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0043.729] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0043.729] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0043.729] lstrlenW (lpString="NlaSvc") returned 6
	[0043.729] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0043.729] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0043.730] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0043.730] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0043.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0043.730] lstrlenW (lpString="nsi") returned 3
	[0043.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0043.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0043.730] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0043.730] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0043.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0043.730] lstrlenW (lpString="PcaSvc") returned 6
	[0043.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0043.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0043.730] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0043.730] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0043.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0043.730] lstrlenW (lpString="PlugPlay") returned 8
	[0043.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0043.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0043.730] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0043.730] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0043.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0043.730] lstrlenW (lpString="Power") returned 5
	[0043.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0043.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0043.730] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0043.730] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0043.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0043.730] lstrlenW (lpString="ProfSvc") returned 7
	[0043.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0043.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0043.730] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0043.730] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0043.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0043.731] lstrlenW (lpString="RpcEptMapper") returned 12
	[0043.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0043.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0043.731] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0043.731] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0043.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0043.731] lstrlenW (lpString="RpcSs") returned 5
	[0043.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0043.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0043.731] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0043.731] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0043.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0043.731] lstrlenW (lpString="SamSs") returned 5
	[0043.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0043.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0043.731] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0043.731] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0043.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0043.731] lstrlenW (lpString="Schedule") returned 8
	[0043.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0043.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0043.731] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0043.731] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0043.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0043.731] lstrlenW (lpString="SENS") returned 4
	[0043.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0043.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0043.731] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0043.731] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0043.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0043.731] lstrlenW (lpString="ShellHWDetection") returned 16
	[0043.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0043.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0043.732] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0043.732] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0043.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0043.732] lstrlenW (lpString="Spooler") returned 7
	[0043.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0043.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0043.732] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0043.732] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0043.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0043.732] lstrlenW (lpString="swprv") returned 5
	[0043.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0043.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0043.732] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0043.732] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0043.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0043.732] lstrlenW (lpString="SysMain") returned 7
	[0043.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0043.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0043.732] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0043.732] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0043.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0043.732] lstrlenW (lpString="Themes") returned 6
	[0043.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0043.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0043.732] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0043.732] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0043.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0043.732] lstrlenW (lpString="TrkWks") returned 6
	[0043.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0043.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0043.732] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0043.732] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0043.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0043.733] lstrlenW (lpString="UxSms") returned 5
	[0043.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0043.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0043.733] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0043.733] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0043.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0043.733] lstrlenW (lpString="VSS") returned 3
	[0043.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0043.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0043.733] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0043.733] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0043.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0043.733] lstrlenW (lpString="WdiServiceHost") returned 14
	[0043.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0043.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0043.733] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0043.733] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0043.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0043.733] lstrlenW (lpString="WdiSystemHost") returned 13
	[0043.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0043.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0043.733] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0043.733] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0043.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0043.733] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0043.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0043.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0043.733] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0043.733] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0043.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0043.733] lstrlenW (lpString="Winmgmt") returned 7
	[0043.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0043.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0043.734] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0043.734] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0043.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0043.734] lstrlenW (lpString="WPDBusEnum") returned 10
	[0043.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0043.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0043.734] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0043.734] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0043.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0043.734] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8e1d150 | out: hHeap=0x5350000) returned 1
	[0043.734] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e8
	[0043.739] Process32FirstW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0043.740] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0043.740] lstrlenW (lpString="System") returned 6
	[0043.741] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0043.741] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0043.741] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0043.741] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0043.741] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0043.741] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0043.741] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0043.741] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0043.741] lstrlenW (lpString="smss.exe") returned 8
	[0043.741] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0043.741] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0043.741] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0043.742] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0043.742] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0043.742] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0043.742] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0043.742] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0043.742] lstrlenW (lpString="csrss.exe") returned 9
	[0043.742] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0043.742] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0043.742] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0043.742] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0043.742] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0043.742] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0043.742] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0043.743] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0043.743] lstrlenW (lpString="wininit.exe") returned 11
	[0043.743] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0043.743] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0043.743] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0043.743] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0043.744] lstrlenW (lpString="csrss.exe") returned 9
	[0043.744] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0043.745] lstrlenW (lpString="winlogon.exe") returned 12
	[0043.745] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0043.746] lstrlenW (lpString="services.exe") returned 12
	[0043.746] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0043.746] lstrlenW (lpString="lsass.exe") returned 9
	[0043.746] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0043.747] lstrlenW (lpString="lsm.exe") returned 7
	[0043.747] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.748] lstrlenW (lpString="svchost.exe") returned 11
	[0043.748] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.748] lstrlenW (lpString="svchost.exe") returned 11
	[0043.749] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.749] lstrlenW (lpString="svchost.exe") returned 11
	[0043.749] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.750] lstrlenW (lpString="svchost.exe") returned 11
	[0043.750] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.751] lstrlenW (lpString="svchost.exe") returned 11
	[0043.751] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0043.752] lstrlenW (lpString="audiodg.exe") returned 11
	[0043.752] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.752] lstrlenW (lpString="svchost.exe") returned 11
	[0043.752] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.753] lstrlenW (lpString="svchost.exe") returned 11
	[0043.753] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0043.754] lstrlenW (lpString="dwm.exe") returned 7
	[0043.754] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0043.754] lstrlenW (lpString="explorer.exe") returned 12
	[0043.755] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0043.755] lstrlenW (lpString="spoolsv.exe") returned 11
	[0043.755] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0043.756] lstrlenW (lpString="taskhost.exe") returned 12
	[0043.756] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.757] lstrlenW (lpString="svchost.exe") returned 11
	[0043.757] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0043.757] lstrlenW (lpString="taskeng.exe") returned 11
	[0043.757] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0043.758] lstrlenW (lpString="taskhost.exe") returned 12
	[0043.758] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0043.759] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0043.759] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0043.906] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0043.906] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0043.907] lstrlenW (lpString="possibilities.exe") returned 17
	[0043.907] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0043.908] lstrlenW (lpString="wilson.exe") returned 10
	[0043.908] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0043.909] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0043.909] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0043.909] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0043.909] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0043.910] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0043.910] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0043.911] lstrlenW (lpString="crisis.exe") returned 10
	[0043.911] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0043.912] lstrlenW (lpString="dramatically.exe") returned 16
	[0043.912] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0043.913] lstrlenW (lpString="rocket.exe") returned 10
	[0043.913] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0043.913] lstrlenW (lpString="warrant.exe") returned 11
	[0043.913] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0043.914] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0043.914] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0043.915] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0043.915] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0043.915] lstrlenW (lpString="israel.exe") returned 10
	[0043.915] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0043.916] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0043.916] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0043.917] lstrlenW (lpString="toxic chain.exe") returned 15
	[0043.917] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0043.918] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0043.918] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0043.918] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0043.919] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0043.920] lstrlenW (lpString="demo.exe") returned 8
	[0043.920] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0043.921] lstrlenW (lpString="cmd.exe") returned 7
	[0043.921] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0043.922] lstrlenW (lpString="conhost.exe") returned 11
	[0043.922] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0043.922] lstrlenW (lpString="vssadmin.exe") returned 12
	[0043.922] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0043.923] lstrlenW (lpString="VSSVC.exe") returned 9
	[0043.923] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.924] lstrlenW (lpString="svchost.exe") returned 11
	[0043.924] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0043.925] CloseHandle (hObject=0x1e8) returned 1
	[0043.925] Sleep (dwMilliseconds=0x1f4) 
	[0044.517] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e7588
	[0044.518] EnumServicesStatusExW (in: hSCManager=0x53e7588, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0044.519] GetLastError () returned 0xea
	[0044.519] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8cf50f8
	[0044.519] EnumServicesStatusExW (in: hSCManager=0x53e7588, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8cf50f8, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8cf50f8, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0044.520] CloseServiceHandle (hSCObject=0x53e7588) returned 1
	[0044.520] lstrlenW (lpString="Appinfo") returned 7
	[0044.520] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0044.520] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0044.520] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0044.520] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0044.520] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0044.520] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0044.520] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0044.520] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0044.520] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0044.520] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0044.521] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0044.521] lstrlenW (lpString="AudioSrv") returned 8
	[0044.521] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0044.521] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0044.521] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0044.521] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0044.521] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0044.521] lstrlenW (lpString="BFE") returned 3
	[0044.521] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0044.521] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0044.521] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0044.521] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0044.521] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0044.521] lstrlenW (lpString="CryptSvc") returned 8
	[0044.521] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0044.521] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0044.521] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0044.521] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0044.521] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0044.521] lstrlenW (lpString="CscService") returned 10
	[0044.521] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0044.521] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0044.521] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0044.521] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0044.521] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0044.521] lstrlenW (lpString="DcomLaunch") returned 10
	[0044.521] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0044.521] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0044.521] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0044.521] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0044.521] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0044.521] lstrlenW (lpString="Dhcp") returned 4
	[0044.521] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0044.522] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0044.522] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0044.522] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0044.522] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0044.522] lstrlenW (lpString="Dnscache") returned 8
	[0044.522] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0044.522] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0044.522] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0044.522] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0044.522] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0044.522] lstrlenW (lpString="DPS") returned 3
	[0044.522] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0044.522] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0044.522] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0044.522] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0044.522] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0044.522] lstrlenW (lpString="eventlog") returned 8
	[0044.522] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0044.522] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0044.522] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0044.522] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0044.522] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0044.522] lstrlenW (lpString="EventSystem") returned 11
	[0044.522] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0044.522] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0044.522] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0044.522] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0044.522] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0044.522] lstrlenW (lpString="gpsvc") returned 5
	[0044.522] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0044.522] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0044.522] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0044.522] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0044.523] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0044.523] lstrlenW (lpString="iphlpsvc") returned 8
	[0044.523] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0044.523] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0044.523] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0044.523] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0044.523] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0044.523] lstrlenW (lpString="LanmanServer") returned 12
	[0044.523] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0044.523] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0044.523] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0044.523] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0044.523] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0044.523] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0044.523] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0044.523] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0044.523] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0044.523] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0044.523] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0044.523] lstrlenW (lpString="lmhosts") returned 7
	[0044.523] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0044.523] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0044.523] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0044.523] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0044.523] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0044.523] lstrlenW (lpString="MMCSS") returned 5
	[0044.523] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0044.523] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0044.523] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0044.523] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0044.523] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0044.523] lstrlenW (lpString="MpsSvc") returned 6
	[0044.524] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0044.524] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0044.524] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0044.524] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0044.524] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0044.524] lstrlenW (lpString="Netman") returned 6
	[0044.524] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0044.524] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0044.524] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0044.524] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0044.524] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0044.524] lstrlenW (lpString="netprofm") returned 8
	[0044.524] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0044.524] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0044.524] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0044.524] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0044.524] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0044.524] lstrlenW (lpString="NlaSvc") returned 6
	[0044.524] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0044.524] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0044.524] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0044.524] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0044.524] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0044.524] lstrlenW (lpString="nsi") returned 3
	[0044.524] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0044.524] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0044.524] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0044.524] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0044.524] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0044.524] lstrlenW (lpString="PcaSvc") returned 6
	[0044.524] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0044.524] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0044.524] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0044.525] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0044.525] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0044.525] lstrlenW (lpString="PlugPlay") returned 8
	[0044.525] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0044.525] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0044.525] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0044.525] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0044.525] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0044.525] lstrlenW (lpString="Power") returned 5
	[0044.525] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0044.525] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0044.525] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0044.525] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0044.525] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0044.525] lstrlenW (lpString="ProfSvc") returned 7
	[0044.525] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0044.525] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0044.525] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0044.525] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0044.525] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0044.525] lstrlenW (lpString="RpcEptMapper") returned 12
	[0044.525] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0044.525] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0044.525] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0044.525] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0044.525] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0044.525] lstrlenW (lpString="RpcSs") returned 5
	[0044.525] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0044.525] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0044.525] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0044.525] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0044.525] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0044.526] lstrlenW (lpString="SamSs") returned 5
	[0044.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0044.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0044.526] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0044.526] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0044.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0044.526] lstrlenW (lpString="Schedule") returned 8
	[0044.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0044.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0044.526] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0044.526] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0044.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0044.526] lstrlenW (lpString="SENS") returned 4
	[0044.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0044.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0044.526] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0044.526] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0044.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0044.526] lstrlenW (lpString="ShellHWDetection") returned 16
	[0044.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0044.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0044.526] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0044.526] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0044.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0044.526] lstrlenW (lpString="Spooler") returned 7
	[0044.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0044.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0044.526] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0044.526] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0044.526] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0044.526] lstrlenW (lpString="swprv") returned 5
	[0044.526] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0044.526] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0044.527] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0044.527] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0044.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0044.527] lstrlenW (lpString="SysMain") returned 7
	[0044.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0044.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0044.527] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0044.527] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0044.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0044.527] lstrlenW (lpString="Themes") returned 6
	[0044.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0044.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0044.527] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0044.527] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0044.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0044.527] lstrlenW (lpString="TrkWks") returned 6
	[0044.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0044.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0044.527] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0044.527] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0044.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0044.527] lstrlenW (lpString="UxSms") returned 5
	[0044.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0044.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0044.527] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0044.527] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0044.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0044.527] lstrlenW (lpString="VSS") returned 3
	[0044.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0044.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0044.527] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0044.528] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0044.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0044.528] lstrlenW (lpString="WdiServiceHost") returned 14
	[0044.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0044.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0044.528] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0044.528] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0044.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0044.528] lstrlenW (lpString="WdiSystemHost") returned 13
	[0044.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0044.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0044.528] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0044.528] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0044.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0044.528] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0044.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0044.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0044.528] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0044.528] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0044.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0044.528] lstrlenW (lpString="Winmgmt") returned 7
	[0044.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0044.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0044.528] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0044.528] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0044.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0044.528] lstrlenW (lpString="WPDBusEnum") returned 10
	[0044.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0044.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0044.528] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0044.528] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0044.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0044.529] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cf50f8 | out: hHeap=0x5350000) returned 1
	[0044.529] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0044.531] Process32FirstW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0044.532] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0044.532] lstrlenW (lpString="System") returned 6
	[0044.532] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0044.533] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0044.533] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0044.533] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0044.533] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0044.533] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0044.533] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0044.533] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0044.533] lstrlenW (lpString="smss.exe") returned 8
	[0044.533] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0044.533] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0044.533] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0044.534] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0044.534] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0044.534] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0044.534] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0044.534] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0044.534] lstrlenW (lpString="csrss.exe") returned 9
	[0044.534] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0044.534] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0044.534] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0044.534] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0044.534] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0044.534] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0044.535] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0044.535] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0044.535] lstrlenW (lpString="wininit.exe") returned 11
	[0044.535] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0044.535] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0044.535] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0044.535] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0044.536] lstrlenW (lpString="csrss.exe") returned 9
	[0044.536] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0044.537] lstrlenW (lpString="winlogon.exe") returned 12
	[0044.537] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0044.538] lstrlenW (lpString="services.exe") returned 12
	[0044.538] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0044.538] lstrlenW (lpString="lsass.exe") returned 9
	[0044.538] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0044.539] lstrlenW (lpString="lsm.exe") returned 7
	[0044.539] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.540] lstrlenW (lpString="svchost.exe") returned 11
	[0044.540] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.541] lstrlenW (lpString="svchost.exe") returned 11
	[0044.541] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.541] lstrlenW (lpString="svchost.exe") returned 11
	[0044.541] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.542] lstrlenW (lpString="svchost.exe") returned 11
	[0044.542] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.543] lstrlenW (lpString="svchost.exe") returned 11
	[0044.543] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0044.543] lstrlenW (lpString="audiodg.exe") returned 11
	[0044.544] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.544] lstrlenW (lpString="svchost.exe") returned 11
	[0044.544] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.545] lstrlenW (lpString="svchost.exe") returned 11
	[0044.545] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0044.546] lstrlenW (lpString="dwm.exe") returned 7
	[0044.546] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0044.547] lstrlenW (lpString="explorer.exe") returned 12
	[0044.547] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0044.547] lstrlenW (lpString="spoolsv.exe") returned 11
	[0044.547] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0044.548] lstrlenW (lpString="taskhost.exe") returned 12
	[0044.548] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.549] lstrlenW (lpString="svchost.exe") returned 11
	[0044.549] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0044.550] lstrlenW (lpString="taskeng.exe") returned 11
	[0044.550] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0044.550] lstrlenW (lpString="taskhost.exe") returned 12
	[0044.550] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0044.551] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0044.551] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0044.552] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0044.552] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0044.552] lstrlenW (lpString="possibilities.exe") returned 17
	[0044.553] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0044.553] lstrlenW (lpString="wilson.exe") returned 10
	[0044.553] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0044.554] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0044.554] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0044.555] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0044.555] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0044.555] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0044.555] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0044.876] lstrlenW (lpString="crisis.exe") returned 10
	[0044.877] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0044.877] lstrlenW (lpString="dramatically.exe") returned 16
	[0044.877] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0044.878] lstrlenW (lpString="rocket.exe") returned 10
	[0044.878] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0044.879] lstrlenW (lpString="warrant.exe") returned 11
	[0044.879] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0044.882] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0044.882] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0044.883] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0044.883] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0044.883] lstrlenW (lpString="israel.exe") returned 10
	[0044.883] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0044.884] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0044.884] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0044.885] lstrlenW (lpString="toxic chain.exe") returned 15
	[0044.885] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0044.885] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0044.885] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0044.886] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0044.886] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0044.887] lstrlenW (lpString="demo.exe") returned 8
	[0044.887] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0044.887] lstrlenW (lpString="cmd.exe") returned 7
	[0044.888] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0044.888] lstrlenW (lpString="conhost.exe") returned 11
	[0044.888] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0044.889] lstrlenW (lpString="vssadmin.exe") returned 12
	[0044.889] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0044.890] lstrlenW (lpString="VSSVC.exe") returned 9
	[0044.890] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.891] lstrlenW (lpString="svchost.exe") returned 11
	[0044.891] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0044.891] CloseHandle (hObject=0x200) returned 1
	[0044.891] Sleep (dwMilliseconds=0x1f4) 
	[0045.728] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e7588
	[0045.729] EnumServicesStatusExW (in: hSCManager=0x53e7588, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0045.729] GetLastError () returned 0xea
	[0045.729] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8cf50f8
	[0045.729] EnumServicesStatusExW (in: hSCManager=0x53e7588, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8cf50f8, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8cf50f8, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0045.730] CloseServiceHandle (hSCObject=0x53e7588) returned 1
	[0045.730] lstrlenW (lpString="Appinfo") returned 7
	[0045.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0045.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0045.730] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0045.730] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0045.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0045.730] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0045.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0045.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0045.730] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0045.730] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0045.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0045.730] lstrlenW (lpString="AudioSrv") returned 8
	[0045.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0045.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0045.730] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0045.730] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0045.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0045.730] lstrlenW (lpString="BFE") returned 3
	[0045.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0045.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0045.731] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0045.731] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0045.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0045.731] lstrlenW (lpString="CryptSvc") returned 8
	[0045.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0045.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0045.731] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0045.731] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0045.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0045.731] lstrlenW (lpString="CscService") returned 10
	[0045.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0045.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0045.731] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0045.731] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0045.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0045.731] lstrlenW (lpString="DcomLaunch") returned 10
	[0045.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0045.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0045.731] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0045.731] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0045.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0045.731] lstrlenW (lpString="Dhcp") returned 4
	[0045.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0045.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0045.732] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0045.732] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0045.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0045.732] lstrlenW (lpString="Dnscache") returned 8
	[0045.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0045.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0045.732] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0045.732] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0045.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0045.732] lstrlenW (lpString="DPS") returned 3
	[0045.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0045.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0045.732] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0045.732] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0045.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0045.732] lstrlenW (lpString="eventlog") returned 8
	[0045.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0045.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0045.732] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0045.732] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0045.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0045.732] lstrlenW (lpString="EventSystem") returned 11
	[0045.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0045.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0045.732] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0045.732] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0045.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0045.732] lstrlenW (lpString="gpsvc") returned 5
	[0045.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0045.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0045.732] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0045.732] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0045.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0045.733] lstrlenW (lpString="iphlpsvc") returned 8
	[0045.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0045.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0045.733] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0045.733] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0045.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0045.733] lstrlenW (lpString="LanmanServer") returned 12
	[0045.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0045.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0045.733] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0045.733] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0045.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0045.733] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0045.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0045.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0045.733] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0045.733] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0045.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0045.733] lstrlenW (lpString="lmhosts") returned 7
	[0045.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0045.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0045.733] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0045.733] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0045.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0045.733] lstrlenW (lpString="MMCSS") returned 5
	[0045.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0045.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0045.733] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0045.733] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0045.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0045.733] lstrlenW (lpString="MpsSvc") returned 6
	[0045.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0045.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0045.733] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0045.734] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0045.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0045.734] lstrlenW (lpString="Netman") returned 6
	[0045.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0045.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0045.734] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0045.734] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0045.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0045.734] lstrlenW (lpString="netprofm") returned 8
	[0045.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0045.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0045.734] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0045.734] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0045.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0045.734] lstrlenW (lpString="NlaSvc") returned 6
	[0045.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0045.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0045.734] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0045.734] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0045.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0045.734] lstrlenW (lpString="nsi") returned 3
	[0045.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0045.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0045.734] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0045.734] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0045.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0045.734] lstrlenW (lpString="PcaSvc") returned 6
	[0045.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0045.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0045.734] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0045.734] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0045.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0045.734] lstrlenW (lpString="PlugPlay") returned 8
	[0045.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0045.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0045.735] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0045.735] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0045.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0045.735] lstrlenW (lpString="Power") returned 5
	[0045.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0045.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0045.735] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0045.735] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0045.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0045.735] lstrlenW (lpString="ProfSvc") returned 7
	[0045.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0045.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0045.735] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0045.735] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0045.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0045.735] lstrlenW (lpString="RpcEptMapper") returned 12
	[0045.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0045.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0045.735] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0045.735] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0045.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0045.735] lstrlenW (lpString="RpcSs") returned 5
	[0045.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0045.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0045.735] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0045.735] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0045.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0045.735] lstrlenW (lpString="SamSs") returned 5
	[0045.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0045.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0045.735] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0045.736] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0045.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0045.736] lstrlenW (lpString="Schedule") returned 8
	[0045.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0045.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0045.736] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0045.736] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0045.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0045.736] lstrlenW (lpString="SENS") returned 4
	[0045.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0045.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0045.736] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0045.736] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0045.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0045.736] lstrlenW (lpString="ShellHWDetection") returned 16
	[0045.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0045.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0045.736] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0045.736] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0045.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0045.736] lstrlenW (lpString="Spooler") returned 7
	[0045.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0045.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0045.736] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0045.736] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0045.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0045.736] lstrlenW (lpString="swprv") returned 5
	[0045.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0045.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0045.736] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0045.736] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0045.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0045.736] lstrlenW (lpString="SysMain") returned 7
	[0045.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0045.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0045.737] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0045.737] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0045.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0045.737] lstrlenW (lpString="Themes") returned 6
	[0045.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0045.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0045.737] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0045.737] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0045.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0045.737] lstrlenW (lpString="TrkWks") returned 6
	[0045.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0045.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0045.737] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0045.737] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0045.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0045.737] lstrlenW (lpString="UxSms") returned 5
	[0045.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0045.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0045.737] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0045.737] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0045.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0045.737] lstrlenW (lpString="VSS") returned 3
	[0045.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0045.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0045.737] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0045.737] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0045.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0045.737] lstrlenW (lpString="WdiServiceHost") returned 14
	[0045.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0045.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0045.737] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0045.738] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0045.738] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0045.738] lstrlenW (lpString="WdiSystemHost") returned 13
	[0045.738] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0045.738] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0045.738] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0045.738] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0045.738] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0045.738] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0045.738] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0045.738] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0045.738] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0045.738] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0045.738] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0045.738] lstrlenW (lpString="Winmgmt") returned 7
	[0045.738] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0045.738] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0045.738] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0045.738] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0045.738] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0045.738] lstrlenW (lpString="WPDBusEnum") returned 10
	[0045.738] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0045.738] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0045.738] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0045.738] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0045.738] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0045.738] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cf50f8 | out: hHeap=0x5350000) returned 1
	[0045.738] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0045.741] Process32FirstW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0045.741] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0045.742] lstrlenW (lpString="System") returned 6
	[0045.742] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0045.742] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0045.742] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0045.742] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0045.742] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0045.742] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0045.742] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0045.742] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0045.743] lstrlenW (lpString="smss.exe") returned 8
	[0045.743] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0045.743] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0045.743] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0045.743] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0045.743] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0045.743] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0045.743] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0045.743] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0045.744] lstrlenW (lpString="csrss.exe") returned 9
	[0045.744] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0045.744] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0045.744] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0045.744] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0045.744] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0045.744] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0045.744] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0045.744] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0045.745] lstrlenW (lpString="wininit.exe") returned 11
	[0045.745] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0045.745] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0045.745] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0045.745] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0045.746] lstrlenW (lpString="csrss.exe") returned 9
	[0045.746] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0045.746] lstrlenW (lpString="winlogon.exe") returned 12
	[0045.746] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0045.747] lstrlenW (lpString="services.exe") returned 12
	[0045.747] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0045.748] lstrlenW (lpString="lsass.exe") returned 9
	[0045.748] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0045.748] lstrlenW (lpString="lsm.exe") returned 7
	[0045.749] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.749] lstrlenW (lpString="svchost.exe") returned 11
	[0045.749] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.750] lstrlenW (lpString="svchost.exe") returned 11
	[0045.750] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.751] lstrlenW (lpString="svchost.exe") returned 11
	[0045.751] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.751] lstrlenW (lpString="svchost.exe") returned 11
	[0045.751] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.752] lstrlenW (lpString="svchost.exe") returned 11
	[0045.752] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0045.753] lstrlenW (lpString="audiodg.exe") returned 11
	[0045.753] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.753] lstrlenW (lpString="svchost.exe") returned 11
	[0045.754] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.754] lstrlenW (lpString="svchost.exe") returned 11
	[0045.754] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0045.755] lstrlenW (lpString="dwm.exe") returned 7
	[0045.755] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0045.756] lstrlenW (lpString="explorer.exe") returned 12
	[0045.756] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0045.756] lstrlenW (lpString="spoolsv.exe") returned 11
	[0045.756] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0045.757] lstrlenW (lpString="taskhost.exe") returned 12
	[0045.757] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.758] lstrlenW (lpString="svchost.exe") returned 11
	[0045.758] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0045.758] lstrlenW (lpString="taskeng.exe") returned 11
	[0045.758] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0045.759] lstrlenW (lpString="taskhost.exe") returned 12
	[0045.759] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0045.760] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0045.760] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0045.761] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0045.761] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0045.761] lstrlenW (lpString="possibilities.exe") returned 17
	[0045.761] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0045.762] lstrlenW (lpString="wilson.exe") returned 10
	[0045.762] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0046.086] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0046.092] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0046.106] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0046.110] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0046.111] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0046.111] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0046.112] lstrlenW (lpString="crisis.exe") returned 10
	[0046.112] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0046.112] lstrlenW (lpString="dramatically.exe") returned 16
	[0046.113] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0046.113] lstrlenW (lpString="rocket.exe") returned 10
	[0046.113] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0046.114] lstrlenW (lpString="warrant.exe") returned 11
	[0046.114] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0046.115] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0046.115] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0046.115] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0046.115] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0046.116] lstrlenW (lpString="israel.exe") returned 10
	[0046.116] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0046.117] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0046.117] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0046.117] lstrlenW (lpString="toxic chain.exe") returned 15
	[0046.118] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0046.118] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0046.118] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0046.119] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0046.119] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0046.120] lstrlenW (lpString="demo.exe") returned 8
	[0046.120] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0046.120] lstrlenW (lpString="cmd.exe") returned 7
	[0046.120] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0046.121] lstrlenW (lpString="conhost.exe") returned 11
	[0046.121] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0046.122] lstrlenW (lpString="vssadmin.exe") returned 12
	[0046.122] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0046.123] lstrlenW (lpString="VSSVC.exe") returned 9
	[0046.123] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.123] lstrlenW (lpString="svchost.exe") returned 11
	[0046.123] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0046.124] CloseHandle (hObject=0x200) returned 1
	[0046.124] Sleep (dwMilliseconds=0x1f4) 
	[0046.808] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e74c0
	[0046.808] EnumServicesStatusExW (in: hSCManager=0x53e74c0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0046.808] GetLastError () returned 0xea
	[0046.808] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x82250c8
	[0046.809] EnumServicesStatusExW (in: hSCManager=0x53e74c0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x82250c8, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x82250c8, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0046.809] CloseServiceHandle (hSCObject=0x53e74c0) returned 1
	[0046.810] lstrlenW (lpString="Appinfo") returned 7
	[0046.810] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0046.810] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0046.810] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0046.810] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0046.810] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0046.810] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0046.810] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0046.810] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0046.810] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0046.810] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0046.810] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0046.810] lstrlenW (lpString="AudioSrv") returned 8
	[0046.810] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0046.810] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0046.810] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0046.810] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0046.810] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0046.810] lstrlenW (lpString="BFE") returned 3
	[0046.810] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0046.810] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0046.810] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0046.810] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0046.810] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0046.810] lstrlenW (lpString="CryptSvc") returned 8
	[0046.810] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0046.810] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0046.810] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0046.810] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0046.810] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0046.810] lstrlenW (lpString="CscService") returned 10
	[0046.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0046.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0046.811] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0046.811] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0046.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0046.811] lstrlenW (lpString="DcomLaunch") returned 10
	[0046.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0046.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0046.811] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0046.811] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0046.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0046.811] lstrlenW (lpString="Dhcp") returned 4
	[0046.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0046.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0046.811] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0046.811] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0046.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0046.811] lstrlenW (lpString="Dnscache") returned 8
	[0046.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0046.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0046.811] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0046.811] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0046.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0046.811] lstrlenW (lpString="DPS") returned 3
	[0046.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0046.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0046.811] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0046.811] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0046.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0046.811] lstrlenW (lpString="eventlog") returned 8
	[0046.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0046.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0046.811] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0046.812] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0046.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0046.812] lstrlenW (lpString="EventSystem") returned 11
	[0046.812] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0046.812] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0046.812] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0046.812] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0046.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0046.812] lstrlenW (lpString="gpsvc") returned 5
	[0046.812] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0046.812] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0046.812] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0046.812] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0046.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0046.812] lstrlenW (lpString="iphlpsvc") returned 8
	[0046.812] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0046.812] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0046.812] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0046.812] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0046.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0046.812] lstrlenW (lpString="LanmanServer") returned 12
	[0046.812] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0046.812] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0046.812] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0046.812] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0046.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0046.812] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0046.812] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0046.812] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0046.812] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0046.812] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0046.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0046.812] lstrlenW (lpString="lmhosts") returned 7
	[0046.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0046.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0046.813] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0046.813] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0046.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0046.813] lstrlenW (lpString="MMCSS") returned 5
	[0046.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0046.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0046.813] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0046.813] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0046.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0046.813] lstrlenW (lpString="MpsSvc") returned 6
	[0046.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0046.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0046.813] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0046.813] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0046.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0046.813] lstrlenW (lpString="Netman") returned 6
	[0046.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0046.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0046.813] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0046.813] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0046.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0046.813] lstrlenW (lpString="netprofm") returned 8
	[0046.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0046.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0046.813] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0046.813] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0046.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0046.813] lstrlenW (lpString="NlaSvc") returned 6
	[0046.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0046.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0046.814] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0046.814] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0046.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0046.814] lstrlenW (lpString="nsi") returned 3
	[0046.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0046.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0046.814] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0046.814] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0046.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0046.814] lstrlenW (lpString="PcaSvc") returned 6
	[0046.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0046.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0046.814] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0046.814] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0046.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0046.814] lstrlenW (lpString="PlugPlay") returned 8
	[0046.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0046.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0046.814] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0046.814] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0046.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0046.814] lstrlenW (lpString="Power") returned 5
	[0046.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0046.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0046.814] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0046.814] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0046.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0046.814] lstrlenW (lpString="ProfSvc") returned 7
	[0046.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0046.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0046.814] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0046.814] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0046.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0046.815] lstrlenW (lpString="RpcEptMapper") returned 12
	[0046.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0046.815] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0046.815] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0046.815] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0046.815] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0046.815] lstrlenW (lpString="RpcSs") returned 5
	[0046.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0046.815] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0046.815] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0046.815] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0046.815] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0046.815] lstrlenW (lpString="SamSs") returned 5
	[0046.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0046.815] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0046.815] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0046.815] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0046.815] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0046.815] lstrlenW (lpString="Schedule") returned 8
	[0046.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0046.815] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0046.815] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0046.815] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0046.815] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0046.815] lstrlenW (lpString="SENS") returned 4
	[0046.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0046.815] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0046.815] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0046.815] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0046.815] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0046.815] lstrlenW (lpString="ShellHWDetection") returned 16
	[0046.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0046.815] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0046.816] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0046.816] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0046.816] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0046.816] lstrlenW (lpString="Spooler") returned 7
	[0046.816] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0046.816] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0046.816] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0046.816] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0046.816] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0046.816] lstrlenW (lpString="swprv") returned 5
	[0046.816] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0046.816] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0046.816] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0046.816] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0046.816] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0046.816] lstrlenW (lpString="SysMain") returned 7
	[0046.816] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0046.816] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0046.816] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0046.816] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0046.816] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0046.816] lstrlenW (lpString="Themes") returned 6
	[0046.816] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0046.816] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0046.816] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0046.816] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0046.816] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0046.816] lstrlenW (lpString="TrkWks") returned 6
	[0046.816] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0046.816] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0046.816] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0046.816] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0046.816] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0046.817] lstrlenW (lpString="UxSms") returned 5
	[0046.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0046.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0046.817] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0046.817] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0046.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0046.817] lstrlenW (lpString="VSS") returned 3
	[0046.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0046.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0046.817] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0046.817] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0046.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0046.817] lstrlenW (lpString="WdiServiceHost") returned 14
	[0046.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0046.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0046.817] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0046.817] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0046.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0046.817] lstrlenW (lpString="WdiSystemHost") returned 13
	[0046.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0046.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0046.817] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0046.817] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0046.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0046.817] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0046.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0046.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0046.817] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0046.817] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0046.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0046.817] lstrlenW (lpString="Winmgmt") returned 7
	[0046.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0046.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0046.818] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0046.818] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0046.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0046.818] lstrlenW (lpString="WPDBusEnum") returned 10
	[0046.818] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0046.818] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0046.818] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0046.818] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0046.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0046.818] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x82250c8 | out: hHeap=0x5350000) returned 1
	[0046.818] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0046.820] Process32FirstW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0046.821] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0046.822] lstrlenW (lpString="System") returned 6
	[0046.822] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0046.822] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0046.822] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0046.822] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0046.822] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0046.822] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0046.822] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0046.822] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0046.823] lstrlenW (lpString="smss.exe") returned 8
	[0046.823] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0046.823] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0046.823] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0046.823] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0046.823] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0046.823] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0046.823] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0046.823] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0046.824] lstrlenW (lpString="csrss.exe") returned 9
	[0046.824] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0046.824] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0046.824] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0046.824] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0046.824] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0046.824] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0046.824] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0046.824] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0046.825] lstrlenW (lpString="wininit.exe") returned 11
	[0046.825] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0046.825] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0046.825] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0046.825] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0046.825] lstrlenW (lpString="csrss.exe") returned 9
	[0046.826] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0046.826] lstrlenW (lpString="winlogon.exe") returned 12
	[0046.826] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0046.827] lstrlenW (lpString="services.exe") returned 12
	[0046.827] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0046.828] lstrlenW (lpString="lsass.exe") returned 9
	[0046.828] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0046.828] lstrlenW (lpString="lsm.exe") returned 7
	[0046.828] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.829] lstrlenW (lpString="svchost.exe") returned 11
	[0046.829] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.830] lstrlenW (lpString="svchost.exe") returned 11
	[0046.830] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.830] lstrlenW (lpString="svchost.exe") returned 11
	[0046.830] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.831] lstrlenW (lpString="svchost.exe") returned 11
	[0046.831] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.832] lstrlenW (lpString="svchost.exe") returned 11
	[0046.832] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0046.833] lstrlenW (lpString="audiodg.exe") returned 11
	[0046.833] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.833] lstrlenW (lpString="svchost.exe") returned 11
	[0046.834] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.834] lstrlenW (lpString="svchost.exe") returned 11
	[0046.834] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0046.835] lstrlenW (lpString="dwm.exe") returned 7
	[0046.835] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0046.836] lstrlenW (lpString="explorer.exe") returned 12
	[0046.836] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0046.836] lstrlenW (lpString="spoolsv.exe") returned 11
	[0046.836] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0046.837] lstrlenW (lpString="taskhost.exe") returned 12
	[0046.837] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.838] lstrlenW (lpString="svchost.exe") returned 11
	[0046.838] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0046.839] lstrlenW (lpString="taskeng.exe") returned 11
	[0046.839] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0046.839] lstrlenW (lpString="taskhost.exe") returned 12
	[0046.839] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0046.840] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0046.840] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0046.841] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0046.841] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0046.842] lstrlenW (lpString="possibilities.exe") returned 17
	[0046.842] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0046.842] lstrlenW (lpString="wilson.exe") returned 10
	[0046.842] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0046.843] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0046.843] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0046.844] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0046.844] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0046.844] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0046.844] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0047.166] lstrlenW (lpString="crisis.exe") returned 10
	[0047.167] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0047.167] lstrlenW (lpString="dramatically.exe") returned 16
	[0047.168] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0047.168] lstrlenW (lpString="rocket.exe") returned 10
	[0047.168] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0047.169] lstrlenW (lpString="warrant.exe") returned 11
	[0047.169] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0047.170] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0047.170] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0047.170] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0047.171] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0047.171] lstrlenW (lpString="israel.exe") returned 10
	[0047.171] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0047.172] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0047.172] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0047.173] lstrlenW (lpString="toxic chain.exe") returned 15
	[0047.173] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0047.173] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0047.173] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0047.174] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0047.174] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0047.175] lstrlenW (lpString="demo.exe") returned 8
	[0047.175] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0047.175] lstrlenW (lpString="cmd.exe") returned 7
	[0047.176] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0047.176] lstrlenW (lpString="conhost.exe") returned 11
	[0047.176] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0047.177] lstrlenW (lpString="vssadmin.exe") returned 12
	[0047.177] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0047.178] lstrlenW (lpString="VSSVC.exe") returned 9
	[0047.178] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.178] lstrlenW (lpString="svchost.exe") returned 11
	[0047.178] Process32NextW (in: hSnapshot=0x200, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0047.179] CloseHandle (hObject=0x200) returned 1
	[0047.179] Sleep (dwMilliseconds=0x1f4) 
	[0047.689] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e7470
	[0047.690] EnumServicesStatusExW (in: hSCManager=0x53e7470, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0047.690] GetLastError () returned 0xea
	[0047.691] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8cf50e0
	[0047.691] EnumServicesStatusExW (in: hSCManager=0x53e7470, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8cf50e0, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8cf50e0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0047.692] CloseServiceHandle (hSCObject=0x53e7470) returned 1
	[0047.692] lstrlenW (lpString="Appinfo") returned 7
	[0047.692] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0047.692] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0047.692] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0047.692] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0047.692] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0047.692] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0047.692] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0047.692] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0047.692] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0047.692] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0047.692] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0047.692] lstrlenW (lpString="AudioSrv") returned 8
	[0047.692] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0047.692] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0047.692] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0047.692] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0047.692] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0047.692] lstrlenW (lpString="BFE") returned 3
	[0047.692] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0047.692] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0047.692] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0047.692] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0047.692] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0047.692] lstrlenW (lpString="CryptSvc") returned 8
	[0047.693] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0047.693] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0047.693] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0047.693] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0047.693] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0047.693] lstrlenW (lpString="CscService") returned 10
	[0047.693] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0047.693] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0047.693] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0047.693] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0047.693] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0047.693] lstrlenW (lpString="DcomLaunch") returned 10
	[0047.693] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0047.693] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0047.693] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0047.693] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0047.693] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0047.693] lstrlenW (lpString="Dhcp") returned 4
	[0047.693] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0047.693] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0047.693] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0047.693] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0047.693] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0047.693] lstrlenW (lpString="Dnscache") returned 8
	[0047.693] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0047.693] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0047.693] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0047.693] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0047.693] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0047.693] lstrlenW (lpString="DPS") returned 3
	[0047.693] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0047.693] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0047.693] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0047.694] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0047.694] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0047.694] lstrlenW (lpString="eventlog") returned 8
	[0047.694] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0047.694] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0047.694] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0047.694] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0047.694] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0047.694] lstrlenW (lpString="EventSystem") returned 11
	[0047.694] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0047.694] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0047.694] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0047.694] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0047.694] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0047.694] lstrlenW (lpString="gpsvc") returned 5
	[0047.694] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0047.694] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0047.694] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0047.694] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0047.694] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0047.694] lstrlenW (lpString="iphlpsvc") returned 8
	[0047.694] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0047.694] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0047.694] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0047.694] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0047.694] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0047.694] lstrlenW (lpString="LanmanServer") returned 12
	[0047.694] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0047.694] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0047.694] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0047.694] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0047.694] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0047.694] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0047.695] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0047.695] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0047.695] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0047.695] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0047.695] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0047.695] lstrlenW (lpString="lmhosts") returned 7
	[0047.695] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0047.695] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0047.695] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0047.695] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0047.695] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0047.695] lstrlenW (lpString="MMCSS") returned 5
	[0047.695] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0047.695] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0047.695] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0047.695] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0047.695] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0047.695] lstrlenW (lpString="MpsSvc") returned 6
	[0047.695] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0047.695] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0047.695] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0047.695] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0047.695] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0047.695] lstrlenW (lpString="Netman") returned 6
	[0047.695] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0047.695] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0047.695] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0047.695] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0047.695] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0047.695] lstrlenW (lpString="netprofm") returned 8
	[0047.695] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0047.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0047.696] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0047.696] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0047.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0047.696] lstrlenW (lpString="NlaSvc") returned 6
	[0047.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0047.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0047.696] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0047.696] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0047.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0047.696] lstrlenW (lpString="nsi") returned 3
	[0047.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0047.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0047.696] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0047.696] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0047.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0047.696] lstrlenW (lpString="PcaSvc") returned 6
	[0047.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0047.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0047.696] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0047.696] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0047.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0047.696] lstrlenW (lpString="PlugPlay") returned 8
	[0047.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0047.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0047.696] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0047.696] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0047.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0047.696] lstrlenW (lpString="Power") returned 5
	[0047.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0047.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0047.696] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0047.697] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0047.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0047.697] lstrlenW (lpString="ProfSvc") returned 7
	[0047.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0047.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0047.697] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0047.697] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0047.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0047.697] lstrlenW (lpString="RpcEptMapper") returned 12
	[0047.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0047.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0047.697] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0047.697] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0047.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0047.697] lstrlenW (lpString="RpcSs") returned 5
	[0047.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0047.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0047.697] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0047.697] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0047.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0047.697] lstrlenW (lpString="SamSs") returned 5
	[0047.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0047.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0047.698] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0047.698] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0047.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0047.698] lstrlenW (lpString="Schedule") returned 8
	[0047.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0047.698] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0047.698] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0047.698] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0047.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0047.698] lstrlenW (lpString="SENS") returned 4
	[0047.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0047.698] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0047.698] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0047.698] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0047.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0047.698] lstrlenW (lpString="ShellHWDetection") returned 16
	[0047.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0047.698] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0047.698] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0047.698] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0047.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0047.698] lstrlenW (lpString="Spooler") returned 7
	[0047.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0047.698] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0047.698] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0047.698] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0047.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0047.699] lstrlenW (lpString="swprv") returned 5
	[0047.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0047.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0047.699] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0047.699] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0047.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0047.699] lstrlenW (lpString="SysMain") returned 7
	[0047.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0047.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0047.699] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0047.699] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0047.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0047.699] lstrlenW (lpString="Themes") returned 6
	[0047.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0047.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0047.699] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0047.699] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0047.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0047.699] lstrlenW (lpString="TrkWks") returned 6
	[0047.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0047.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0047.699] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0047.699] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0047.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0047.699] lstrlenW (lpString="UxSms") returned 5
	[0047.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0047.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0047.699] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0047.699] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0047.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0047.699] lstrlenW (lpString="VSS") returned 3
	[0047.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0047.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0047.700] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0047.700] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0047.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0047.700] lstrlenW (lpString="WdiServiceHost") returned 14
	[0047.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0047.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0047.700] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0047.700] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0047.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0047.700] lstrlenW (lpString="WdiSystemHost") returned 13
	[0047.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0047.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0047.700] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0047.700] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0047.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0047.700] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0047.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0047.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0047.700] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0047.700] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0047.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0047.700] lstrlenW (lpString="Winmgmt") returned 7
	[0047.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0047.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0047.700] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0047.700] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0047.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0047.700] lstrlenW (lpString="WPDBusEnum") returned 10
	[0047.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0047.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0047.700] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0047.700] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0047.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0047.701] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cf50e0 | out: hHeap=0x5350000) returned 1
	[0047.701] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x220
	[0047.703] Process32FirstW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0047.706] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0047.706] lstrlenW (lpString="System") returned 6
	[0047.706] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0047.706] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0047.706] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0047.706] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0047.706] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0047.706] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0047.706] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0047.706] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0047.707] lstrlenW (lpString="smss.exe") returned 8
	[0047.707] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0047.707] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0047.707] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0047.707] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0047.707] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0047.707] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0047.707] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0047.707] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0047.708] lstrlenW (lpString="csrss.exe") returned 9
	[0047.708] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0047.708] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0047.708] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0047.708] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0047.708] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0047.708] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0047.708] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0047.708] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0047.709] lstrlenW (lpString="wininit.exe") returned 11
	[0047.709] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0047.709] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0047.709] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0047.709] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0047.710] lstrlenW (lpString="csrss.exe") returned 9
	[0047.710] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0047.710] lstrlenW (lpString="winlogon.exe") returned 12
	[0047.710] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0047.711] lstrlenW (lpString="services.exe") returned 12
	[0047.711] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0047.712] lstrlenW (lpString="lsass.exe") returned 9
	[0047.712] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0047.716] lstrlenW (lpString="lsm.exe") returned 7
	[0047.716] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.717] lstrlenW (lpString="svchost.exe") returned 11
	[0047.717] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.718] lstrlenW (lpString="svchost.exe") returned 11
	[0047.718] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.718] lstrlenW (lpString="svchost.exe") returned 11
	[0047.718] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.719] lstrlenW (lpString="svchost.exe") returned 11
	[0047.719] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.720] lstrlenW (lpString="svchost.exe") returned 11
	[0047.720] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0047.720] lstrlenW (lpString="audiodg.exe") returned 11
	[0047.720] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.721] lstrlenW (lpString="svchost.exe") returned 11
	[0047.721] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.722] lstrlenW (lpString="svchost.exe") returned 11
	[0047.722] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0047.722] lstrlenW (lpString="dwm.exe") returned 7
	[0047.723] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0047.723] lstrlenW (lpString="explorer.exe") returned 12
	[0047.723] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0047.724] lstrlenW (lpString="spoolsv.exe") returned 11
	[0047.724] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0047.725] lstrlenW (lpString="taskhost.exe") returned 12
	[0047.725] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.725] lstrlenW (lpString="svchost.exe") returned 11
	[0047.725] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0047.726] lstrlenW (lpString="taskeng.exe") returned 11
	[0047.726] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0047.727] lstrlenW (lpString="taskhost.exe") returned 12
	[0047.727] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0047.727] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0047.727] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0048.040] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0048.040] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0048.041] lstrlenW (lpString="possibilities.exe") returned 17
	[0048.041] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0048.042] lstrlenW (lpString="wilson.exe") returned 10
	[0048.042] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0048.043] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0048.043] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0048.044] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0048.044] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0048.045] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0048.045] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0048.046] lstrlenW (lpString="crisis.exe") returned 10
	[0048.046] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0048.047] lstrlenW (lpString="dramatically.exe") returned 16
	[0048.047] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0048.048] lstrlenW (lpString="rocket.exe") returned 10
	[0048.048] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0048.049] lstrlenW (lpString="warrant.exe") returned 11
	[0048.049] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0048.050] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0048.050] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0048.051] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0048.051] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0048.052] lstrlenW (lpString="israel.exe") returned 10
	[0048.052] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0048.052] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0048.052] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0048.053] lstrlenW (lpString="toxic chain.exe") returned 15
	[0048.053] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0048.054] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0048.054] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0048.054] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0048.054] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0048.055] lstrlenW (lpString="demo.exe") returned 8
	[0048.055] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0048.056] lstrlenW (lpString="cmd.exe") returned 7
	[0048.056] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0048.057] lstrlenW (lpString="conhost.exe") returned 11
	[0048.057] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0048.057] lstrlenW (lpString="vssadmin.exe") returned 12
	[0048.057] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0048.058] lstrlenW (lpString="VSSVC.exe") returned 9
	[0048.058] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0048.059] lstrlenW (lpString="svchost.exe") returned 11
	[0048.059] Process32NextW (in: hSnapshot=0x220, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0048.060] CloseHandle (hObject=0x220) returned 1
	[0048.060] Sleep (dwMilliseconds=0x1f4) 
	[0049.281] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e7718
	[0049.281] EnumServicesStatusExW (in: hSCManager=0x53e7718, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0049.327] GetLastError () returned 0xea
	[0049.327] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8dad130
	[0049.327] EnumServicesStatusExW (in: hSCManager=0x53e7718, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8dad130, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8dad130, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0049.328] CloseServiceHandle (hSCObject=0x53e7718) returned 1
	[0049.328] lstrlenW (lpString="Appinfo") returned 7
	[0049.328] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0049.328] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0049.328] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0049.328] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0049.328] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0049.328] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0049.328] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0049.328] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0049.328] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0049.328] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0049.329] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0049.329] lstrlenW (lpString="AudioSrv") returned 8
	[0049.329] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0049.329] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0049.329] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0049.329] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0049.329] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0049.329] lstrlenW (lpString="BFE") returned 3
	[0049.329] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0049.329] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0049.329] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0049.329] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0049.329] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0049.329] lstrlenW (lpString="CryptSvc") returned 8
	[0049.329] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0049.329] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0049.329] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0049.329] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0049.329] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0049.329] lstrlenW (lpString="CscService") returned 10
	[0049.329] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0049.329] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0049.329] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0049.329] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0049.329] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0049.329] lstrlenW (lpString="DcomLaunch") returned 10
	[0049.329] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0049.329] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0049.329] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0049.329] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0049.329] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0049.329] lstrlenW (lpString="Dhcp") returned 4
	[0049.330] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0049.330] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0049.330] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0049.330] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0049.330] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0049.330] lstrlenW (lpString="Dnscache") returned 8
	[0049.330] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0049.330] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0049.330] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0049.330] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0049.330] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0049.330] lstrlenW (lpString="DPS") returned 3
	[0049.330] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0049.330] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0049.330] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0049.330] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0049.330] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0049.330] lstrlenW (lpString="eventlog") returned 8
	[0049.330] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0049.330] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0049.330] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0049.330] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0049.330] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0049.330] lstrlenW (lpString="EventSystem") returned 11
	[0049.330] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0049.330] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0049.330] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0049.330] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0049.330] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0049.330] lstrlenW (lpString="gpsvc") returned 5
	[0049.330] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0049.330] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0049.331] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0049.331] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0049.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0049.331] lstrlenW (lpString="iphlpsvc") returned 8
	[0049.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0049.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0049.331] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0049.331] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0049.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0049.331] lstrlenW (lpString="LanmanServer") returned 12
	[0049.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0049.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0049.331] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0049.331] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0049.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0049.331] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0049.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0049.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0049.331] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0049.331] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0049.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0049.331] lstrlenW (lpString="lmhosts") returned 7
	[0049.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0049.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0049.331] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0049.331] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0049.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0049.331] lstrlenW (lpString="MMCSS") returned 5
	[0049.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0049.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0049.331] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0049.331] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0049.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0049.332] lstrlenW (lpString="MpsSvc") returned 6
	[0049.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0049.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0049.332] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0049.332] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0049.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0049.332] lstrlenW (lpString="Netman") returned 6
	[0049.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0049.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0049.332] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0049.332] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0049.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0049.332] lstrlenW (lpString="netprofm") returned 8
	[0049.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0049.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0049.332] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0049.332] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0049.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0049.332] lstrlenW (lpString="NlaSvc") returned 6
	[0049.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0049.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0049.332] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0049.332] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0049.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0049.332] lstrlenW (lpString="nsi") returned 3
	[0049.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0049.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0049.332] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0049.332] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0049.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0049.332] lstrlenW (lpString="PcaSvc") returned 6
	[0049.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0049.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0049.333] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0049.333] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0049.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0049.333] lstrlenW (lpString="PlugPlay") returned 8
	[0049.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0049.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0049.333] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0049.333] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0049.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0049.333] lstrlenW (lpString="Power") returned 5
	[0049.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0049.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0049.333] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0049.333] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0049.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0049.333] lstrlenW (lpString="ProfSvc") returned 7
	[0049.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0049.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0049.333] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0049.333] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0049.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0049.333] lstrlenW (lpString="RpcEptMapper") returned 12
	[0049.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0049.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0049.333] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0049.333] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0049.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0049.333] lstrlenW (lpString="RpcSs") returned 5
	[0049.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0049.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0049.333] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0049.333] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0049.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0049.334] lstrlenW (lpString="SamSs") returned 5
	[0049.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0049.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0049.334] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0049.334] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0049.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0049.334] lstrlenW (lpString="Schedule") returned 8
	[0049.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0049.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0049.334] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0049.334] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0049.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0049.334] lstrlenW (lpString="SENS") returned 4
	[0049.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0049.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0049.334] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0049.334] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0049.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0049.334] lstrlenW (lpString="ShellHWDetection") returned 16
	[0049.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0049.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0049.334] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0049.334] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0049.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0049.334] lstrlenW (lpString="Spooler") returned 7
	[0049.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0049.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0049.334] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0049.334] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0049.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0049.334] lstrlenW (lpString="swprv") returned 5
	[0049.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0049.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0049.335] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0049.335] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0049.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0049.335] lstrlenW (lpString="SysMain") returned 7
	[0049.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0049.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0049.335] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0049.335] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0049.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0049.335] lstrlenW (lpString="Themes") returned 6
	[0049.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0049.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0049.335] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0049.335] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0049.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0049.335] lstrlenW (lpString="TrkWks") returned 6
	[0049.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0049.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0049.335] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0049.335] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0049.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0049.335] lstrlenW (lpString="UxSms") returned 5
	[0049.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0049.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0049.335] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0049.335] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0049.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0049.335] lstrlenW (lpString="VSS") returned 3
	[0049.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0049.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0049.335] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0049.336] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0049.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0049.336] lstrlenW (lpString="WdiServiceHost") returned 14
	[0049.336] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0049.336] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0049.336] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0049.336] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0049.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0049.336] lstrlenW (lpString="WdiSystemHost") returned 13
	[0049.336] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0049.336] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0049.336] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0049.336] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0049.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0049.336] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0049.336] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0049.336] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0049.336] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0049.336] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0049.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0049.336] lstrlenW (lpString="Winmgmt") returned 7
	[0049.336] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0049.336] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0049.336] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0049.336] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0049.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0049.336] lstrlenW (lpString="WPDBusEnum") returned 10
	[0049.336] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0049.336] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0049.336] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0049.336] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0049.336] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0049.337] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8dad130 | out: hHeap=0x5350000) returned 1
	[0049.337] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0
	[0049.339] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0049.340] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0049.340] lstrlenW (lpString="System") returned 6
	[0049.340] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0049.340] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0049.340] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0049.340] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0049.340] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0049.340] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0049.340] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0049.340] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0049.341] lstrlenW (lpString="smss.exe") returned 8
	[0049.341] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0049.341] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0049.341] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0049.341] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0049.341] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0049.341] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0049.341] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0049.341] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0049.342] lstrlenW (lpString="csrss.exe") returned 9
	[0049.342] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0049.342] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0049.342] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0049.342] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0049.342] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0049.342] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0049.342] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0049.342] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0049.343] lstrlenW (lpString="wininit.exe") returned 11
	[0049.343] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0049.343] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0049.343] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0049.343] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0049.344] lstrlenW (lpString="csrss.exe") returned 9
	[0049.344] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0049.344] lstrlenW (lpString="winlogon.exe") returned 12
	[0049.345] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0049.345] lstrlenW (lpString="services.exe") returned 12
	[0049.345] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0049.346] lstrlenW (lpString="lsass.exe") returned 9
	[0049.346] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0049.347] lstrlenW (lpString="lsm.exe") returned 7
	[0049.347] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.348] lstrlenW (lpString="svchost.exe") returned 11
	[0049.348] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.348] lstrlenW (lpString="svchost.exe") returned 11
	[0049.348] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.349] lstrlenW (lpString="svchost.exe") returned 11
	[0049.349] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.350] lstrlenW (lpString="svchost.exe") returned 11
	[0049.350] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.351] lstrlenW (lpString="svchost.exe") returned 11
	[0049.351] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0049.351] lstrlenW (lpString="audiodg.exe") returned 11
	[0049.351] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.352] lstrlenW (lpString="svchost.exe") returned 11
	[0049.352] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.353] lstrlenW (lpString="svchost.exe") returned 11
	[0049.353] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0049.354] lstrlenW (lpString="dwm.exe") returned 7
	[0049.354] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0049.357] lstrlenW (lpString="explorer.exe") returned 12
	[0049.357] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0049.358] lstrlenW (lpString="spoolsv.exe") returned 11
	[0049.358] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0049.358] lstrlenW (lpString="taskhost.exe") returned 12
	[0049.358] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.359] lstrlenW (lpString="svchost.exe") returned 11
	[0049.359] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0049.360] lstrlenW (lpString="taskeng.exe") returned 11
	[0049.360] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0049.361] lstrlenW (lpString="taskhost.exe") returned 12
	[0049.361] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0049.361] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0049.361] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0049.362] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0049.362] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0049.363] lstrlenW (lpString="possibilities.exe") returned 17
	[0049.363] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0049.363] lstrlenW (lpString="wilson.exe") returned 10
	[0049.363] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0049.364] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0049.364] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0049.365] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0049.365] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0049.366] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0049.366] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0049.450] lstrlenW (lpString="crisis.exe") returned 10
	[0049.450] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0049.451] lstrlenW (lpString="dramatically.exe") returned 16
	[0049.451] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0049.452] lstrlenW (lpString="rocket.exe") returned 10
	[0049.452] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0049.453] lstrlenW (lpString="warrant.exe") returned 11
	[0049.453] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0049.453] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0049.453] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0049.454] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0049.454] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0049.455] lstrlenW (lpString="israel.exe") returned 10
	[0049.455] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0049.456] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0049.456] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0049.456] lstrlenW (lpString="toxic chain.exe") returned 15
	[0049.456] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0049.457] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0049.457] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0049.458] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0049.458] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0049.459] lstrlenW (lpString="demo.exe") returned 8
	[0049.459] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0049.459] lstrlenW (lpString="cmd.exe") returned 7
	[0049.459] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0049.460] lstrlenW (lpString="conhost.exe") returned 11
	[0049.460] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0049.461] lstrlenW (lpString="vssadmin.exe") returned 12
	[0049.461] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0049.462] lstrlenW (lpString="VSSVC.exe") returned 9
	[0049.462] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.462] lstrlenW (lpString="svchost.exe") returned 11
	[0049.462] Process32NextW (in: hSnapshot=0x1e0, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0049.463] CloseHandle (hObject=0x1e0) returned 1
	[0049.463] Sleep (dwMilliseconds=0x1f4) 
	[0049.998] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e74c0
	[0049.998] EnumServicesStatusExW (in: hSCManager=0x53e74c0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0049.998] GetLastError () returned 0xea
	[0049.999] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8cb20c0
	[0049.999] EnumServicesStatusExW (in: hSCManager=0x53e74c0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8cb20c0, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8cb20c0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0049.999] CloseServiceHandle (hSCObject=0x53e74c0) returned 1
	[0050.000] lstrlenW (lpString="Appinfo") returned 7
	[0050.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0050.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0050.000] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0050.000] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0050.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0050.000] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0050.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0050.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0050.000] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0050.000] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0050.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0050.000] lstrlenW (lpString="AudioSrv") returned 8
	[0050.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0050.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0050.000] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0050.000] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0050.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0050.000] lstrlenW (lpString="BFE") returned 3
	[0050.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0050.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0050.000] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0050.000] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0050.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0050.000] lstrlenW (lpString="CryptSvc") returned 8
	[0050.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0050.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0050.000] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0050.001] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0050.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0050.001] lstrlenW (lpString="CscService") returned 10
	[0050.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0050.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0050.001] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0050.001] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0050.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0050.001] lstrlenW (lpString="DcomLaunch") returned 10
	[0050.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0050.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0050.001] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0050.001] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0050.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0050.001] lstrlenW (lpString="Dhcp") returned 4
	[0050.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0050.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0050.001] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0050.001] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0050.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0050.001] lstrlenW (lpString="Dnscache") returned 8
	[0050.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0050.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0050.001] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0050.001] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0050.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0050.001] lstrlenW (lpString="DPS") returned 3
	[0050.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0050.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0050.001] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0050.001] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0050.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0050.001] lstrlenW (lpString="eventlog") returned 8
	[0050.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0050.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0050.002] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0050.002] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0050.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0050.002] lstrlenW (lpString="EventSystem") returned 11
	[0050.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0050.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0050.002] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0050.002] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0050.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0050.002] lstrlenW (lpString="gpsvc") returned 5
	[0050.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0050.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0050.002] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0050.002] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0050.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0050.002] lstrlenW (lpString="iphlpsvc") returned 8
	[0050.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0050.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0050.002] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0050.002] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0050.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0050.002] lstrlenW (lpString="LanmanServer") returned 12
	[0050.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0050.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0050.002] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0050.002] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0050.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0050.002] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0050.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0050.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0050.002] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0050.002] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0050.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0050.003] lstrlenW (lpString="lmhosts") returned 7
	[0050.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0050.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0050.003] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0050.003] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0050.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0050.003] lstrlenW (lpString="MMCSS") returned 5
	[0050.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0050.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0050.003] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0050.003] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0050.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0050.003] lstrlenW (lpString="MpsSvc") returned 6
	[0050.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0050.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0050.003] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0050.003] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0050.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0050.003] lstrlenW (lpString="Netman") returned 6
	[0050.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0050.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0050.003] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0050.003] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0050.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0050.003] lstrlenW (lpString="netprofm") returned 8
	[0050.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0050.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0050.003] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0050.003] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0050.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0050.003] lstrlenW (lpString="NlaSvc") returned 6
	[0050.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0050.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0050.004] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0050.004] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0050.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0050.004] lstrlenW (lpString="nsi") returned 3
	[0050.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0050.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0050.004] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0050.004] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0050.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0050.004] lstrlenW (lpString="PcaSvc") returned 6
	[0050.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0050.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0050.004] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0050.004] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0050.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0050.004] lstrlenW (lpString="PlugPlay") returned 8
	[0050.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0050.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0050.004] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0050.004] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0050.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0050.004] lstrlenW (lpString="Power") returned 5
	[0050.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0050.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0050.004] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0050.004] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0050.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0050.004] lstrlenW (lpString="ProfSvc") returned 7
	[0050.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0050.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0050.005] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0050.005] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0050.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0050.005] lstrlenW (lpString="RpcEptMapper") returned 12
	[0050.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0050.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0050.005] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0050.005] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0050.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0050.005] lstrlenW (lpString="RpcSs") returned 5
	[0050.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0050.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0050.005] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0050.005] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0050.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0050.005] lstrlenW (lpString="SamSs") returned 5
	[0050.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0050.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0050.005] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0050.005] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0050.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0050.005] lstrlenW (lpString="Schedule") returned 8
	[0050.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0050.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0050.005] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0050.005] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0050.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0050.005] lstrlenW (lpString="SENS") returned 4
	[0050.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0050.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0050.006] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0050.006] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0050.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0050.006] lstrlenW (lpString="ShellHWDetection") returned 16
	[0050.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0050.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0050.006] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0050.006] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0050.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0050.006] lstrlenW (lpString="Spooler") returned 7
	[0050.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0050.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0050.006] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0050.006] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0050.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0050.006] lstrlenW (lpString="swprv") returned 5
	[0050.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0050.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0050.006] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0050.006] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0050.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0050.006] lstrlenW (lpString="SysMain") returned 7
	[0050.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0050.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0050.006] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0050.006] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0050.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0050.007] lstrlenW (lpString="Themes") returned 6
	[0050.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0050.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0050.007] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0050.007] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0050.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0050.007] lstrlenW (lpString="TrkWks") returned 6
	[0050.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0050.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0050.007] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0050.007] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0050.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0050.007] lstrlenW (lpString="UxSms") returned 5
	[0050.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0050.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0050.007] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0050.007] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0050.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0050.007] lstrlenW (lpString="VSS") returned 3
	[0050.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0050.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0050.007] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0050.007] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0050.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0050.007] lstrlenW (lpString="WdiServiceHost") returned 14
	[0050.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0050.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0050.007] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0050.007] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0050.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0050.007] lstrlenW (lpString="WdiSystemHost") returned 13
	[0050.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0050.008] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0050.008] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0050.008] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0050.008] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0050.008] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0050.008] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0050.008] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0050.008] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0050.008] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0050.008] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0050.008] lstrlenW (lpString="Winmgmt") returned 7
	[0050.008] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0050.008] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0050.008] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0050.008] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0050.008] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0050.008] lstrlenW (lpString="WPDBusEnum") returned 10
	[0050.008] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0050.008] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0050.008] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0050.008] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0050.008] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0050.008] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb20c0 | out: hHeap=0x5350000) returned 1
	[0050.008] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1bc
	[0050.011] Process32FirstW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0050.011] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0050.012] lstrlenW (lpString="System") returned 6
	[0050.012] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0050.012] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0050.012] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0050.012] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0050.012] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0050.012] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0050.012] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0050.012] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0050.013] lstrlenW (lpString="smss.exe") returned 8
	[0050.013] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0050.013] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0050.013] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0050.013] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0050.013] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0050.013] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0050.013] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0050.013] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0050.014] lstrlenW (lpString="csrss.exe") returned 9
	[0050.014] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0050.014] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0050.014] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0050.014] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0050.014] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0050.014] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0050.014] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0050.014] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0050.015] lstrlenW (lpString="wininit.exe") returned 11
	[0050.015] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0050.015] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0050.015] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0050.015] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0050.015] lstrlenW (lpString="csrss.exe") returned 9
	[0050.016] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0050.016] lstrlenW (lpString="winlogon.exe") returned 12
	[0050.016] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0050.017] lstrlenW (lpString="services.exe") returned 12
	[0050.017] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0050.018] lstrlenW (lpString="lsass.exe") returned 9
	[0050.018] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0050.018] lstrlenW (lpString="lsm.exe") returned 7
	[0050.018] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.019] lstrlenW (lpString="svchost.exe") returned 11
	[0050.019] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.020] lstrlenW (lpString="svchost.exe") returned 11
	[0050.020] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.020] lstrlenW (lpString="svchost.exe") returned 11
	[0050.020] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.021] lstrlenW (lpString="svchost.exe") returned 11
	[0050.021] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.022] lstrlenW (lpString="svchost.exe") returned 11
	[0050.022] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0050.023] lstrlenW (lpString="audiodg.exe") returned 11
	[0050.023] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.023] lstrlenW (lpString="svchost.exe") returned 11
	[0050.023] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.024] lstrlenW (lpString="svchost.exe") returned 11
	[0050.024] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0050.025] lstrlenW (lpString="dwm.exe") returned 7
	[0050.025] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0050.025] lstrlenW (lpString="explorer.exe") returned 12
	[0050.025] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0050.026] lstrlenW (lpString="spoolsv.exe") returned 11
	[0050.026] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0050.027] lstrlenW (lpString="taskhost.exe") returned 12
	[0050.027] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.028] lstrlenW (lpString="svchost.exe") returned 11
	[0050.028] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0050.028] lstrlenW (lpString="taskeng.exe") returned 11
	[0050.028] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0050.029] lstrlenW (lpString="taskhost.exe") returned 12
	[0050.029] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0050.030] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0050.030] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0050.030] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0050.030] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0050.031] lstrlenW (lpString="possibilities.exe") returned 17
	[0050.031] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0050.032] lstrlenW (lpString="wilson.exe") returned 10
	[0050.032] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0050.032] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0050.033] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0050.033] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0050.033] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0050.034] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0050.034] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0050.035] lstrlenW (lpString="crisis.exe") returned 10
	[0050.035] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0050.035] lstrlenW (lpString="dramatically.exe") returned 16
	[0050.035] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0050.036] lstrlenW (lpString="rocket.exe") returned 10
	[0050.036] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0050.037] lstrlenW (lpString="warrant.exe") returned 11
	[0050.037] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0050.038] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0050.038] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0050.039] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0050.039] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0050.039] lstrlenW (lpString="israel.exe") returned 10
	[0050.039] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0050.040] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0050.040] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0050.041] lstrlenW (lpString="toxic chain.exe") returned 15
	[0050.041] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0050.041] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0050.041] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0050.042] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0050.042] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0050.043] lstrlenW (lpString="demo.exe") returned 8
	[0050.043] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0050.044] lstrlenW (lpString="cmd.exe") returned 7
	[0050.044] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0050.044] lstrlenW (lpString="conhost.exe") returned 11
	[0050.044] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0050.045] lstrlenW (lpString="vssadmin.exe") returned 12
	[0050.045] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0050.046] lstrlenW (lpString="VSSVC.exe") returned 9
	[0050.046] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.046] lstrlenW (lpString="svchost.exe") returned 11
	[0050.046] Process32NextW (in: hSnapshot=0x1bc, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0050.047] CloseHandle (hObject=0x1bc) returned 1
	[0050.047] Sleep (dwMilliseconds=0x1f4) 
	[0050.693] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e74e8
	[0050.694] EnumServicesStatusExW (in: hSCManager=0x53e74e8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0050.695] GetLastError () returned 0xea
	[0050.695] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8cb20c0
	[0050.695] EnumServicesStatusExW (in: hSCManager=0x53e74e8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8cb20c0, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8cb20c0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0050.695] CloseServiceHandle (hSCObject=0x53e74e8) returned 1
	[0050.696] lstrlenW (lpString="Appinfo") returned 7
	[0050.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0050.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0050.696] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0050.696] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0050.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0050.696] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0050.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0050.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0050.696] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0050.696] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0050.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0050.696] lstrlenW (lpString="AudioSrv") returned 8
	[0050.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0050.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0050.696] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0050.696] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0050.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0050.696] lstrlenW (lpString="BFE") returned 3
	[0050.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0050.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0050.696] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0050.696] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0050.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0050.696] lstrlenW (lpString="CryptSvc") returned 8
	[0050.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0050.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0050.696] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0050.696] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0050.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0050.696] lstrlenW (lpString="CscService") returned 10
	[0050.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0050.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0050.697] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0050.697] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0050.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0050.697] lstrlenW (lpString="DcomLaunch") returned 10
	[0050.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0050.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0050.697] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0050.697] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0050.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0050.697] lstrlenW (lpString="Dhcp") returned 4
	[0050.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0050.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0050.697] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0050.697] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0050.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0050.697] lstrlenW (lpString="Dnscache") returned 8
	[0050.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0050.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0050.697] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0050.697] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0050.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0050.697] lstrlenW (lpString="DPS") returned 3
	[0050.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0050.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0050.697] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0050.697] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0050.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0050.697] lstrlenW (lpString="eventlog") returned 8
	[0050.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0050.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0050.697] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0050.698] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0050.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0050.698] lstrlenW (lpString="EventSystem") returned 11
	[0050.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0050.698] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0050.698] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0050.698] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0050.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0050.698] lstrlenW (lpString="gpsvc") returned 5
	[0050.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0050.698] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0050.698] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0050.698] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0050.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0050.698] lstrlenW (lpString="iphlpsvc") returned 8
	[0050.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0050.698] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0050.698] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0050.698] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0050.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0050.698] lstrlenW (lpString="LanmanServer") returned 12
	[0050.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0050.698] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0050.698] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0050.698] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0050.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0050.698] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0050.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0050.698] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0050.698] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0050.698] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0050.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0050.698] lstrlenW (lpString="lmhosts") returned 7
	[0050.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0050.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0050.699] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0050.699] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0050.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0050.699] lstrlenW (lpString="MMCSS") returned 5
	[0050.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0050.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0050.699] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0050.699] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0050.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0050.699] lstrlenW (lpString="MpsSvc") returned 6
	[0050.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0050.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0050.699] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0050.699] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0050.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0050.699] lstrlenW (lpString="Netman") returned 6
	[0050.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0050.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0050.699] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0050.699] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0050.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0050.699] lstrlenW (lpString="netprofm") returned 8
	[0050.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0050.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0050.699] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0050.699] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0050.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0050.699] lstrlenW (lpString="NlaSvc") returned 6
	[0050.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0050.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0050.700] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0050.700] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0050.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0050.700] lstrlenW (lpString="nsi") returned 3
	[0050.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0050.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0050.700] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0050.700] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0050.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0050.700] lstrlenW (lpString="PcaSvc") returned 6
	[0050.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0050.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0050.700] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0050.700] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0050.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0050.700] lstrlenW (lpString="PlugPlay") returned 8
	[0050.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0050.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0050.700] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0050.700] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0050.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0050.700] lstrlenW (lpString="Power") returned 5
	[0050.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0050.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0050.700] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0050.700] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0050.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0050.700] lstrlenW (lpString="ProfSvc") returned 7
	[0050.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0050.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0050.700] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0050.700] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0050.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0050.701] lstrlenW (lpString="RpcEptMapper") returned 12
	[0050.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0050.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0050.701] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0050.701] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0050.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0050.701] lstrlenW (lpString="RpcSs") returned 5
	[0050.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0050.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0050.701] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0050.701] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0050.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0050.701] lstrlenW (lpString="SamSs") returned 5
	[0050.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0050.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0050.701] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0050.701] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0050.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0050.701] lstrlenW (lpString="Schedule") returned 8
	[0050.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0050.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0050.701] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0050.701] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0050.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0050.701] lstrlenW (lpString="SENS") returned 4
	[0050.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0050.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0050.701] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0050.701] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0050.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0050.701] lstrlenW (lpString="ShellHWDetection") returned 16
	[0050.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0050.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0050.702] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0050.702] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0050.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0050.702] lstrlenW (lpString="Spooler") returned 7
	[0050.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0050.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0050.702] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0050.702] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0050.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0050.702] lstrlenW (lpString="swprv") returned 5
	[0050.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0050.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0050.702] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0050.702] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0050.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0050.702] lstrlenW (lpString="SysMain") returned 7
	[0050.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0050.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0050.702] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0050.702] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0050.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0050.702] lstrlenW (lpString="Themes") returned 6
	[0050.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0050.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0050.702] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0050.702] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0050.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0050.702] lstrlenW (lpString="TrkWks") returned 6
	[0050.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0050.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0050.702] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0050.703] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0050.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0050.703] lstrlenW (lpString="UxSms") returned 5
	[0050.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0050.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0050.703] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0050.703] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0050.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0050.703] lstrlenW (lpString="VSS") returned 3
	[0050.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0050.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0050.703] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0050.703] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0050.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0050.703] lstrlenW (lpString="WdiServiceHost") returned 14
	[0050.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0050.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0050.703] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0050.703] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0050.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0050.703] lstrlenW (lpString="WdiSystemHost") returned 13
	[0050.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0050.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0050.703] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0050.703] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0050.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0050.703] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0050.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0050.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0050.703] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0050.703] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0050.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0050.704] lstrlenW (lpString="Winmgmt") returned 7
	[0050.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0050.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0050.704] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0050.704] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0050.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0050.704] lstrlenW (lpString="WPDBusEnum") returned 10
	[0050.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0050.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0050.704] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0050.704] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0050.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0050.704] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb20c0 | out: hHeap=0x5350000) returned 1
	[0050.704] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x194
	[0050.707] Process32FirstW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0050.707] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0050.709] lstrlenW (lpString="System") returned 6
	[0050.709] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0050.709] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0050.709] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0050.709] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0050.709] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0050.709] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0050.709] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0050.709] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0050.710] lstrlenW (lpString="smss.exe") returned 8
	[0050.713] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0050.713] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0050.713] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0050.713] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0050.713] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0050.713] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0050.713] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0050.713] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0050.714] lstrlenW (lpString="csrss.exe") returned 9
	[0050.714] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0050.714] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0050.714] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0050.714] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0050.714] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0050.714] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0050.714] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0050.714] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0050.715] lstrlenW (lpString="wininit.exe") returned 11
	[0050.715] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0050.715] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0050.715] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0050.715] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0050.841] lstrlenW (lpString="csrss.exe") returned 9
	[0050.841] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0050.842] lstrlenW (lpString="winlogon.exe") returned 12
	[0050.842] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0050.843] lstrlenW (lpString="services.exe") returned 12
	[0050.843] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0050.843] lstrlenW (lpString="lsass.exe") returned 9
	[0050.843] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0050.844] lstrlenW (lpString="lsm.exe") returned 7
	[0050.844] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.845] lstrlenW (lpString="svchost.exe") returned 11
	[0050.845] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.846] lstrlenW (lpString="svchost.exe") returned 11
	[0050.846] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.846] lstrlenW (lpString="svchost.exe") returned 11
	[0050.846] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.847] lstrlenW (lpString="svchost.exe") returned 11
	[0050.847] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.848] lstrlenW (lpString="svchost.exe") returned 11
	[0050.848] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0050.849] lstrlenW (lpString="audiodg.exe") returned 11
	[0050.849] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.850] lstrlenW (lpString="svchost.exe") returned 11
	[0050.850] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.850] lstrlenW (lpString="svchost.exe") returned 11
	[0050.850] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0050.851] lstrlenW (lpString="dwm.exe") returned 7
	[0050.851] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0050.852] lstrlenW (lpString="explorer.exe") returned 12
	[0050.852] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0050.853] lstrlenW (lpString="spoolsv.exe") returned 11
	[0050.853] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0050.853] lstrlenW (lpString="taskhost.exe") returned 12
	[0050.853] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.854] lstrlenW (lpString="svchost.exe") returned 11
	[0050.854] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0050.855] lstrlenW (lpString="taskeng.exe") returned 11
	[0050.855] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0050.856] lstrlenW (lpString="taskhost.exe") returned 12
	[0050.856] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0050.856] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0050.856] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0050.857] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0050.857] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0050.858] lstrlenW (lpString="possibilities.exe") returned 17
	[0050.858] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0050.859] lstrlenW (lpString="wilson.exe") returned 10
	[0050.859] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0050.859] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0050.859] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0050.860] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0050.860] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0050.861] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0050.861] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0050.862] lstrlenW (lpString="crisis.exe") returned 10
	[0050.862] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0050.862] lstrlenW (lpString="dramatically.exe") returned 16
	[0050.862] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0050.863] lstrlenW (lpString="rocket.exe") returned 10
	[0050.863] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0051.208] lstrlenW (lpString="warrant.exe") returned 11
	[0051.208] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0051.209] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0051.209] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0051.210] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0051.210] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0051.211] lstrlenW (lpString="israel.exe") returned 10
	[0051.211] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0051.211] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0051.211] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0051.212] lstrlenW (lpString="toxic chain.exe") returned 15
	[0051.212] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0051.213] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0051.213] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0051.213] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0051.213] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0051.214] lstrlenW (lpString="demo.exe") returned 8
	[0051.214] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0051.215] lstrlenW (lpString="cmd.exe") returned 7
	[0051.215] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0051.216] lstrlenW (lpString="conhost.exe") returned 11
	[0051.216] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0051.216] lstrlenW (lpString="vssadmin.exe") returned 12
	[0051.216] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0051.217] lstrlenW (lpString="VSSVC.exe") returned 9
	[0051.217] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.218] lstrlenW (lpString="svchost.exe") returned 11
	[0051.218] Process32NextW (in: hSnapshot=0x194, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0051.218] CloseHandle (hObject=0x194) returned 1
	[0051.218] Sleep (dwMilliseconds=0x1f4) 
	[0051.933] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e74e8
	[0051.933] EnumServicesStatusExW (in: hSCManager=0x53e74e8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0051.934] GetLastError () returned 0xea
	[0051.934] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8cb20c0
	[0051.934] EnumServicesStatusExW (in: hSCManager=0x53e74e8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8cb20c0, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8cb20c0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0051.934] CloseServiceHandle (hSCObject=0x53e74e8) returned 1
	[0051.934] lstrlenW (lpString="Appinfo") returned 7
	[0051.935] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0051.935] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0051.935] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0051.935] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0051.935] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0051.935] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0051.935] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0051.935] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0051.935] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0051.935] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0051.935] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0051.935] lstrlenW (lpString="AudioSrv") returned 8
	[0051.935] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0051.935] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0051.935] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0051.935] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0051.935] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0051.935] lstrlenW (lpString="BFE") returned 3
	[0051.935] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0051.935] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0051.935] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0051.935] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0051.935] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0051.935] lstrlenW (lpString="CryptSvc") returned 8
	[0051.935] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0051.935] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0051.935] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0051.935] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0051.935] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0051.935] lstrlenW (lpString="CscService") returned 10
	[0051.935] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0051.935] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0051.936] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0051.936] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0051.936] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0051.936] lstrlenW (lpString="DcomLaunch") returned 10
	[0051.936] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0051.936] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0051.936] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0051.936] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0051.936] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0051.936] lstrlenW (lpString="Dhcp") returned 4
	[0051.936] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0051.936] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0051.936] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0051.936] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0051.936] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0051.936] lstrlenW (lpString="Dnscache") returned 8
	[0051.936] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0051.936] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0051.936] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0051.936] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0051.936] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0051.936] lstrlenW (lpString="DPS") returned 3
	[0051.936] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0051.936] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0051.937] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0051.937] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0051.937] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0051.937] lstrlenW (lpString="eventlog") returned 8
	[0051.937] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0051.937] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0051.937] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0051.937] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0051.937] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0051.937] lstrlenW (lpString="EventSystem") returned 11
	[0051.937] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0051.937] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0051.937] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0051.937] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0051.937] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0051.937] lstrlenW (lpString="gpsvc") returned 5
	[0051.937] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0051.937] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0051.937] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0051.937] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0051.937] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0051.937] lstrlenW (lpString="iphlpsvc") returned 8
	[0051.942] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0051.942] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0051.942] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0051.942] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0051.942] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0051.942] lstrlenW (lpString="LanmanServer") returned 12
	[0051.942] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0051.942] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0051.942] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0051.942] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0051.942] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0051.942] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0051.942] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0051.942] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0051.942] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0051.942] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0051.942] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0051.942] lstrlenW (lpString="lmhosts") returned 7
	[0051.942] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0051.942] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0051.942] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0051.942] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0051.942] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0051.942] lstrlenW (lpString="MMCSS") returned 5
	[0051.942] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0051.942] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0051.942] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0051.942] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0051.942] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0051.942] lstrlenW (lpString="MpsSvc") returned 6
	[0051.942] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0051.942] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0051.943] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0051.943] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0051.943] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0051.943] lstrlenW (lpString="Netman") returned 6
	[0051.943] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0051.943] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0051.943] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0051.943] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0051.943] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0051.943] lstrlenW (lpString="netprofm") returned 8
	[0051.943] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0051.943] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0051.943] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0051.943] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0051.943] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0051.943] lstrlenW (lpString="NlaSvc") returned 6
	[0051.943] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0051.943] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0051.943] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0051.943] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0051.943] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0051.943] lstrlenW (lpString="nsi") returned 3
	[0051.943] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0051.943] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0051.943] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0051.943] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0051.943] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0051.943] lstrlenW (lpString="PcaSvc") returned 6
	[0051.943] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0051.943] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0051.943] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0051.943] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0051.944] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0051.944] lstrlenW (lpString="PlugPlay") returned 8
	[0051.944] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0051.944] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0051.944] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0051.944] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0051.944] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0051.944] lstrlenW (lpString="Power") returned 5
	[0051.944] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0051.944] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0051.944] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0051.944] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0051.944] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0051.944] lstrlenW (lpString="ProfSvc") returned 7
	[0051.944] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0051.944] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0051.944] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0051.944] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0051.950] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0051.950] lstrlenW (lpString="RpcEptMapper") returned 12
	[0051.950] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0051.950] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0051.950] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0051.950] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0051.950] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0051.950] lstrlenW (lpString="RpcSs") returned 5
	[0051.950] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0051.950] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0051.950] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0051.950] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0051.951] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0051.951] lstrlenW (lpString="SamSs") returned 5
	[0051.951] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0051.951] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0051.951] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0051.951] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0051.951] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0051.951] lstrlenW (lpString="Schedule") returned 8
	[0051.951] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0051.951] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0051.951] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0051.951] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0051.951] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0051.951] lstrlenW (lpString="SENS") returned 4
	[0051.951] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0051.951] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0051.951] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0051.951] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0051.951] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0051.951] lstrlenW (lpString="ShellHWDetection") returned 16
	[0051.951] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0051.951] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0051.951] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0051.951] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0051.951] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0051.951] lstrlenW (lpString="Spooler") returned 7
	[0051.951] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0051.951] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0051.951] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0051.951] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0051.951] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0051.951] lstrlenW (lpString="swprv") returned 5
	[0051.952] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0051.952] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0051.952] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0051.952] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0051.952] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0051.952] lstrlenW (lpString="SysMain") returned 7
	[0051.952] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0051.952] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0051.952] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0051.952] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0051.952] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0051.952] lstrlenW (lpString="Themes") returned 6
	[0051.952] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0051.952] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0051.952] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0051.952] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0051.952] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0051.952] lstrlenW (lpString="TrkWks") returned 6
	[0051.952] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0051.952] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0051.952] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0051.952] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0051.952] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0051.952] lstrlenW (lpString="UxSms") returned 5
	[0051.952] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0051.952] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0051.952] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0051.952] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0051.952] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0051.952] lstrlenW (lpString="VSS") returned 3
	[0051.952] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0051.952] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0051.952] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0051.953] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0051.953] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0051.953] lstrlenW (lpString="WdiServiceHost") returned 14
	[0051.953] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0051.953] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0051.953] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0051.953] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0051.953] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0051.953] lstrlenW (lpString="WdiSystemHost") returned 13
	[0051.953] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0051.953] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0051.953] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0051.953] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0051.953] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0051.953] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0051.953] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0051.953] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0051.953] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0051.953] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0051.953] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0051.953] lstrlenW (lpString="Winmgmt") returned 7
	[0051.953] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0051.953] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0051.953] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0051.954] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0051.954] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0051.954] lstrlenW (lpString="WPDBusEnum") returned 10
	[0051.954] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0051.954] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0051.954] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0051.954] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0051.954] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0051.954] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb20c0 | out: hHeap=0x5350000) returned 1
	[0051.954] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x224
	[0051.957] Process32FirstW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0051.958] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0051.958] lstrlenW (lpString="System") returned 6
	[0051.958] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0051.958] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0051.958] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0051.958] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0051.958] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0051.958] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0051.958] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0051.958] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0051.959] lstrlenW (lpString="smss.exe") returned 8
	[0051.959] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0051.959] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0051.959] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0051.959] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0051.959] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0051.959] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0051.959] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0051.959] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0051.960] lstrlenW (lpString="csrss.exe") returned 9
	[0051.960] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0051.960] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0051.960] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0051.960] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0051.960] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0051.960] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0051.960] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0051.960] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0051.961] lstrlenW (lpString="wininit.exe") returned 11
	[0051.961] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0051.961] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0051.961] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0051.961] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0051.962] lstrlenW (lpString="csrss.exe") returned 9
	[0051.962] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0051.963] lstrlenW (lpString="winlogon.exe") returned 12
	[0051.963] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0051.964] lstrlenW (lpString="services.exe") returned 12
	[0051.964] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0051.964] lstrlenW (lpString="lsass.exe") returned 9
	[0051.964] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0051.967] lstrlenW (lpString="lsm.exe") returned 7
	[0051.967] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.968] lstrlenW (lpString="svchost.exe") returned 11
	[0051.968] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.969] lstrlenW (lpString="svchost.exe") returned 11
	[0051.969] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.969] lstrlenW (lpString="svchost.exe") returned 11
	[0051.969] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.970] lstrlenW (lpString="svchost.exe") returned 11
	[0051.970] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.971] lstrlenW (lpString="svchost.exe") returned 11
	[0051.971] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0051.972] lstrlenW (lpString="audiodg.exe") returned 11
	[0051.972] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.972] lstrlenW (lpString="svchost.exe") returned 11
	[0051.972] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.973] lstrlenW (lpString="svchost.exe") returned 11
	[0051.973] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0051.974] lstrlenW (lpString="dwm.exe") returned 7
	[0051.974] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0051.974] lstrlenW (lpString="explorer.exe") returned 12
	[0051.974] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0051.975] lstrlenW (lpString="spoolsv.exe") returned 11
	[0051.975] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0051.976] lstrlenW (lpString="taskhost.exe") returned 12
	[0051.976] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.977] lstrlenW (lpString="svchost.exe") returned 11
	[0051.977] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0051.978] lstrlenW (lpString="taskeng.exe") returned 11
	[0051.978] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0051.979] lstrlenW (lpString="taskhost.exe") returned 12
	[0051.979] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0051.979] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0051.979] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0051.980] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0051.980] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0051.981] lstrlenW (lpString="possibilities.exe") returned 17
	[0051.981] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0051.982] lstrlenW (lpString="wilson.exe") returned 10
	[0051.982] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0051.983] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0051.983] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0052.078] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0052.078] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0052.079] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0052.079] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0052.080] lstrlenW (lpString="crisis.exe") returned 10
	[0052.080] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0052.081] lstrlenW (lpString="dramatically.exe") returned 16
	[0052.081] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0052.082] lstrlenW (lpString="rocket.exe") returned 10
	[0052.082] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0052.082] lstrlenW (lpString="warrant.exe") returned 11
	[0052.082] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0052.083] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0052.083] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0052.084] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0052.084] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0052.084] lstrlenW (lpString="israel.exe") returned 10
	[0052.084] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0052.085] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0052.085] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0052.086] lstrlenW (lpString="toxic chain.exe") returned 15
	[0052.086] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0052.087] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0052.087] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0052.087] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0052.087] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0052.088] lstrlenW (lpString="demo.exe") returned 8
	[0052.088] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0052.089] lstrlenW (lpString="cmd.exe") returned 7
	[0052.089] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0052.089] lstrlenW (lpString="conhost.exe") returned 11
	[0052.090] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0052.090] lstrlenW (lpString="vssadmin.exe") returned 12
	[0052.090] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0052.091] lstrlenW (lpString="VSSVC.exe") returned 9
	[0052.091] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.092] lstrlenW (lpString="svchost.exe") returned 11
	[0052.092] Process32NextW (in: hSnapshot=0x224, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0052.092] CloseHandle (hObject=0x224) returned 1
	[0052.092] Sleep (dwMilliseconds=0x1f4) 
	[0052.705] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e7740
	[0052.705] EnumServicesStatusExW (in: hSCManager=0x53e7740, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0052.705] GetLastError () returned 0xea
	[0052.705] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8cb20c0
	[0052.706] EnumServicesStatusExW (in: hSCManager=0x53e7740, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8cb20c0, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8cb20c0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0052.706] CloseServiceHandle (hSCObject=0x53e7740) returned 1
	[0052.707] lstrlenW (lpString="Appinfo") returned 7
	[0052.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0052.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0052.707] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0052.707] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0052.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0052.707] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0052.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0052.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0052.707] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0052.707] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0052.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0052.707] lstrlenW (lpString="AudioSrv") returned 8
	[0052.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0052.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0052.707] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0052.707] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0052.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0052.707] lstrlenW (lpString="BFE") returned 3
	[0052.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0052.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0052.707] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0052.707] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0052.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0052.707] lstrlenW (lpString="CryptSvc") returned 8
	[0052.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0052.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0052.707] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0052.707] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0052.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0052.708] lstrlenW (lpString="CscService") returned 10
	[0052.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0052.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0052.708] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0052.708] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0052.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0052.708] lstrlenW (lpString="DcomLaunch") returned 10
	[0052.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0052.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0052.708] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0052.708] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0052.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0052.708] lstrlenW (lpString="Dhcp") returned 4
	[0052.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0052.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0052.708] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0052.708] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0052.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0052.708] lstrlenW (lpString="Dnscache") returned 8
	[0052.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0052.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0052.708] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0052.708] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0052.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0052.708] lstrlenW (lpString="DPS") returned 3
	[0052.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0052.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0052.708] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0052.708] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0052.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0052.708] lstrlenW (lpString="eventlog") returned 8
	[0052.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0052.709] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0052.709] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0052.709] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0052.709] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0052.709] lstrlenW (lpString="EventSystem") returned 11
	[0052.709] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0052.709] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0052.709] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0052.709] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0052.709] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0052.709] lstrlenW (lpString="gpsvc") returned 5
	[0052.709] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0052.709] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0052.709] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0052.709] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0052.709] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0052.709] lstrlenW (lpString="iphlpsvc") returned 8
	[0052.709] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0052.709] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0052.709] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0052.709] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0052.709] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0052.709] lstrlenW (lpString="LanmanServer") returned 12
	[0052.709] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0052.709] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0052.709] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0052.709] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0052.709] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0052.709] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0052.709] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0052.709] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0052.709] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0052.710] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0052.710] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0052.710] lstrlenW (lpString="lmhosts") returned 7
	[0052.710] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0052.710] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0052.710] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0052.710] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0052.710] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0052.710] lstrlenW (lpString="MMCSS") returned 5
	[0052.710] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0052.710] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0052.710] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0052.710] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0052.710] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0052.710] lstrlenW (lpString="MpsSvc") returned 6
	[0052.710] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0052.710] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0052.710] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0052.710] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0052.710] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0052.710] lstrlenW (lpString="Netman") returned 6
	[0052.710] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0052.710] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0052.710] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0052.710] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0052.710] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0052.710] lstrlenW (lpString="netprofm") returned 8
	[0052.710] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0052.710] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0052.710] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0052.710] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0052.710] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0052.710] lstrlenW (lpString="NlaSvc") returned 6
	[0052.711] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0052.711] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0052.711] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0052.711] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0052.711] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0052.711] lstrlenW (lpString="nsi") returned 3
	[0052.711] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0052.711] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0052.711] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0052.711] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0052.711] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0052.711] lstrlenW (lpString="PcaSvc") returned 6
	[0052.711] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0052.711] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0052.711] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0052.711] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0052.711] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0052.711] lstrlenW (lpString="PlugPlay") returned 8
	[0052.711] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0052.711] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0052.711] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0052.711] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0052.711] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0052.711] lstrlenW (lpString="Power") returned 5
	[0052.711] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0052.711] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0052.711] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0052.711] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0052.711] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0052.711] lstrlenW (lpString="ProfSvc") returned 7
	[0052.711] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0052.711] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0052.712] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0052.712] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0052.712] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0052.712] lstrlenW (lpString="RpcEptMapper") returned 12
	[0052.712] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0052.712] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0052.712] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0052.712] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0052.712] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0052.712] lstrlenW (lpString="RpcSs") returned 5
	[0052.712] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0052.712] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0052.712] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0052.712] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0052.712] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0052.712] lstrlenW (lpString="SamSs") returned 5
	[0052.712] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0052.712] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0052.712] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0052.712] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0052.712] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0052.712] lstrlenW (lpString="Schedule") returned 8
	[0052.712] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0052.712] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0052.712] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0052.712] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0052.712] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0052.712] lstrlenW (lpString="SENS") returned 4
	[0052.712] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0052.712] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0052.712] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0052.712] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0052.713] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0052.713] lstrlenW (lpString="ShellHWDetection") returned 16
	[0052.713] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0052.713] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0052.713] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0052.713] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0052.713] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0052.713] lstrlenW (lpString="Spooler") returned 7
	[0052.713] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0052.713] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0052.713] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0052.713] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0052.713] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0052.713] lstrlenW (lpString="swprv") returned 5
	[0052.713] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0052.713] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0052.713] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0052.713] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0052.713] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0052.713] lstrlenW (lpString="SysMain") returned 7
	[0052.713] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0052.713] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0052.713] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0052.713] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0052.713] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0052.713] lstrlenW (lpString="Themes") returned 6
	[0052.713] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0052.713] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0052.713] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0052.713] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0052.713] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0052.713] lstrlenW (lpString="TrkWks") returned 6
	[0052.713] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0052.714] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0052.714] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0052.714] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0052.714] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0052.714] lstrlenW (lpString="UxSms") returned 5
	[0052.714] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0052.714] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0052.714] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0052.714] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0052.714] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0052.714] lstrlenW (lpString="VSS") returned 3
	[0052.714] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0052.714] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0052.714] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0052.714] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0052.714] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0052.714] lstrlenW (lpString="WdiServiceHost") returned 14
	[0052.714] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0052.714] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0052.714] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0052.714] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0052.714] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0052.714] lstrlenW (lpString="WdiSystemHost") returned 13
	[0052.714] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0052.714] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0052.714] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0052.714] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0052.714] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0052.714] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0052.714] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0052.714] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0052.714] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0052.714] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0052.715] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0052.715] lstrlenW (lpString="Winmgmt") returned 7
	[0052.715] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0052.715] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0052.715] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0052.715] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0052.715] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0052.715] lstrlenW (lpString="WPDBusEnum") returned 10
	[0052.715] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0052.715] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0052.715] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0052.715] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0052.715] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0052.715] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb20c0 | out: hHeap=0x5350000) returned 1
	[0052.715] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e4
	[0052.717] Process32FirstW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0052.718] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0052.719] lstrlenW (lpString="System") returned 6
	[0052.719] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0052.719] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0052.719] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0052.719] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0052.719] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0052.719] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0052.719] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0052.719] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0052.719] lstrlenW (lpString="smss.exe") returned 8
	[0052.719] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0052.720] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0052.720] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0052.720] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0052.720] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0052.720] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0052.720] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0052.720] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0052.721] lstrlenW (lpString="csrss.exe") returned 9
	[0052.721] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0052.721] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0052.721] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0052.721] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0052.721] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0052.721] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0052.721] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0052.721] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0052.721] lstrlenW (lpString="wininit.exe") returned 11
	[0052.721] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0052.722] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0052.722] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0052.722] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0052.722] lstrlenW (lpString="csrss.exe") returned 9
	[0052.722] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0052.723] lstrlenW (lpString="winlogon.exe") returned 12
	[0052.723] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0052.724] lstrlenW (lpString="services.exe") returned 12
	[0052.724] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0052.725] lstrlenW (lpString="lsass.exe") returned 9
	[0052.725] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0052.725] lstrlenW (lpString="lsm.exe") returned 7
	[0052.725] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.726] lstrlenW (lpString="svchost.exe") returned 11
	[0052.726] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.727] lstrlenW (lpString="svchost.exe") returned 11
	[0052.727] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.727] lstrlenW (lpString="svchost.exe") returned 11
	[0052.727] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.728] lstrlenW (lpString="svchost.exe") returned 11
	[0052.728] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.729] lstrlenW (lpString="svchost.exe") returned 11
	[0052.729] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0052.730] lstrlenW (lpString="audiodg.exe") returned 11
	[0052.730] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.730] lstrlenW (lpString="svchost.exe") returned 11
	[0052.730] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.731] lstrlenW (lpString="svchost.exe") returned 11
	[0052.731] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0052.732] lstrlenW (lpString="dwm.exe") returned 7
	[0052.732] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0052.732] lstrlenW (lpString="explorer.exe") returned 12
	[0052.733] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0052.733] lstrlenW (lpString="spoolsv.exe") returned 11
	[0052.733] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0052.756] lstrlenW (lpString="taskhost.exe") returned 12
	[0052.756] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.777] lstrlenW (lpString="svchost.exe") returned 11
	[0052.777] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0052.778] lstrlenW (lpString="taskeng.exe") returned 11
	[0052.778] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0052.779] lstrlenW (lpString="taskhost.exe") returned 12
	[0052.779] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0052.780] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0052.780] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0052.780] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0052.780] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0052.781] lstrlenW (lpString="possibilities.exe") returned 17
	[0052.781] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0052.782] lstrlenW (lpString="wilson.exe") returned 10
	[0052.782] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0052.964] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0052.964] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0052.964] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0052.965] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0053.038] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0053.038] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0053.039] lstrlenW (lpString="crisis.exe") returned 10
	[0053.039] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0053.040] lstrlenW (lpString="dramatically.exe") returned 16
	[0053.040] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0053.079] lstrlenW (lpString="rocket.exe") returned 10
	[0053.080] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0053.080] lstrlenW (lpString="warrant.exe") returned 11
	[0053.080] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0053.081] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0053.081] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0053.082] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0053.082] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0053.082] lstrlenW (lpString="israel.exe") returned 10
	[0053.083] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0053.083] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0053.083] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0053.084] lstrlenW (lpString="toxic chain.exe") returned 15
	[0053.084] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0053.085] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0053.085] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0053.085] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0053.085] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0053.086] lstrlenW (lpString="demo.exe") returned 8
	[0053.086] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0053.087] lstrlenW (lpString="cmd.exe") returned 7
	[0053.087] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0053.088] lstrlenW (lpString="conhost.exe") returned 11
	[0053.088] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0053.088] lstrlenW (lpString="vssadmin.exe") returned 12
	[0053.088] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0053.089] lstrlenW (lpString="VSSVC.exe") returned 9
	[0053.089] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.090] lstrlenW (lpString="svchost.exe") returned 11
	[0053.090] Process32NextW (in: hSnapshot=0x1e4, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0053.091] CloseHandle (hObject=0x1e4) returned 1
	[0053.091] Sleep (dwMilliseconds=0x1f4) 
	[0053.802] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e7678
	[0053.802] EnumServicesStatusExW (in: hSCManager=0x53e7678, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0053.802] GetLastError () returned 0xea
	[0053.802] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x82290c8
	[0053.803] EnumServicesStatusExW (in: hSCManager=0x53e7678, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x82290c8, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x82290c8, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0053.803] CloseServiceHandle (hSCObject=0x53e7678) returned 1
	[0053.803] lstrlenW (lpString="Appinfo") returned 7
	[0053.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0053.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0053.803] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0053.803] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0053.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0053.804] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0053.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0053.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0053.804] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0053.804] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0053.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0053.804] lstrlenW (lpString="AudioSrv") returned 8
	[0053.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0053.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0053.804] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0053.804] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0053.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0053.804] lstrlenW (lpString="BFE") returned 3
	[0053.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0053.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0053.804] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0053.804] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0053.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0053.804] lstrlenW (lpString="CryptSvc") returned 8
	[0053.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0053.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0053.804] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0053.804] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0053.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0053.804] lstrlenW (lpString="CscService") returned 10
	[0053.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0053.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0053.804] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0053.804] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0053.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0053.804] lstrlenW (lpString="DcomLaunch") returned 10
	[0053.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0053.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0053.805] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0053.805] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0053.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0053.805] lstrlenW (lpString="Dhcp") returned 4
	[0053.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0053.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0053.805] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0053.805] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0053.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0053.805] lstrlenW (lpString="Dnscache") returned 8
	[0053.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0053.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0053.805] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0053.805] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0053.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0053.805] lstrlenW (lpString="DPS") returned 3
	[0053.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0053.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0053.805] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0053.805] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0053.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0053.805] lstrlenW (lpString="eventlog") returned 8
	[0053.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0053.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0053.805] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0053.805] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0053.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0053.805] lstrlenW (lpString="EventSystem") returned 11
	[0053.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0053.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0053.805] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0053.806] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0053.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0053.806] lstrlenW (lpString="gpsvc") returned 5
	[0053.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0053.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0053.806] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0053.806] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0053.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0053.806] lstrlenW (lpString="iphlpsvc") returned 8
	[0053.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0053.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0053.806] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0053.806] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0053.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0053.806] lstrlenW (lpString="LanmanServer") returned 12
	[0053.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0053.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0053.806] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0053.806] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0053.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0053.806] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0053.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0053.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0053.806] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0053.806] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0053.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0053.806] lstrlenW (lpString="lmhosts") returned 7
	[0053.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0053.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0053.806] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0053.806] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0053.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0053.807] lstrlenW (lpString="MMCSS") returned 5
	[0053.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0053.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0053.807] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0053.807] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0053.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0053.807] lstrlenW (lpString="MpsSvc") returned 6
	[0053.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0053.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0053.807] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0053.807] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0053.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0053.807] lstrlenW (lpString="Netman") returned 6
	[0053.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0053.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0053.807] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0053.807] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0053.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0053.807] lstrlenW (lpString="netprofm") returned 8
	[0053.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0053.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0053.807] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0053.807] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0053.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0053.807] lstrlenW (lpString="NlaSvc") returned 6
	[0053.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0053.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0053.807] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0053.807] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0053.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0053.807] lstrlenW (lpString="nsi") returned 3
	[0053.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0053.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0053.808] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0053.808] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0053.808] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0053.808] lstrlenW (lpString="PcaSvc") returned 6
	[0053.808] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0053.808] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0053.808] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0053.808] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0053.808] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0053.808] lstrlenW (lpString="PlugPlay") returned 8
	[0053.808] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0053.808] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0053.808] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0053.808] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0053.808] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0053.808] lstrlenW (lpString="Power") returned 5
	[0053.808] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0053.808] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0053.808] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0053.808] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0053.808] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0053.808] lstrlenW (lpString="ProfSvc") returned 7
	[0053.808] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0053.808] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0053.808] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0053.808] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0053.808] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0053.808] lstrlenW (lpString="RpcEptMapper") returned 12
	[0053.808] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0053.808] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0053.808] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0053.808] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0053.809] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0053.809] lstrlenW (lpString="RpcSs") returned 5
	[0053.809] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0053.809] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0053.809] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0053.809] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0053.809] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0053.809] lstrlenW (lpString="SamSs") returned 5
	[0053.809] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0053.809] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0053.809] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0053.809] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0053.809] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0053.809] lstrlenW (lpString="Schedule") returned 8
	[0053.809] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0053.809] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0053.809] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0053.809] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0053.809] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0053.809] lstrlenW (lpString="SENS") returned 4
	[0053.809] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0053.809] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0053.809] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0053.809] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0053.809] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0053.809] lstrlenW (lpString="ShellHWDetection") returned 16
	[0053.809] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0053.809] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0053.809] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0053.809] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0053.809] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0053.809] lstrlenW (lpString="Spooler") returned 7
	[0053.809] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0053.810] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0053.810] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0053.810] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0053.810] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0053.810] lstrlenW (lpString="swprv") returned 5
	[0053.810] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0053.810] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0053.810] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0053.810] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0053.810] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0053.810] lstrlenW (lpString="SysMain") returned 7
	[0053.810] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0053.810] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0053.810] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0053.810] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0053.810] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0053.810] lstrlenW (lpString="Themes") returned 6
	[0053.810] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0053.810] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0053.810] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0053.810] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0053.810] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0053.810] lstrlenW (lpString="TrkWks") returned 6
	[0053.810] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0053.810] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0053.810] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0053.810] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0053.810] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0053.810] lstrlenW (lpString="UxSms") returned 5
	[0053.810] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0053.810] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0053.810] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0053.810] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0053.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0053.811] lstrlenW (lpString="VSS") returned 3
	[0053.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0053.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0053.811] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0053.811] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0053.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0053.811] lstrlenW (lpString="WdiServiceHost") returned 14
	[0053.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0053.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0053.811] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0053.811] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0053.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0053.811] lstrlenW (lpString="WdiSystemHost") returned 13
	[0053.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0053.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0053.811] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0053.811] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0053.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0053.811] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0053.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0053.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0053.811] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0053.811] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0053.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0053.811] lstrlenW (lpString="Winmgmt") returned 7
	[0053.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0053.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0053.811] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0053.811] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0053.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0053.811] lstrlenW (lpString="WPDBusEnum") returned 10
	[0053.812] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0053.812] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0053.812] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0053.812] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0053.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0053.812] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x82290c8 | out: hHeap=0x5350000) returned 1
	[0053.812] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x16c
	[0053.814] Process32FirstW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0053.815] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0053.815] lstrlenW (lpString="System") returned 6
	[0053.815] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0053.815] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0053.816] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0053.816] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0053.816] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0053.816] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0053.816] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0053.816] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0053.816] lstrlenW (lpString="smss.exe") returned 8
	[0053.816] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0053.816] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0053.816] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0053.816] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0053.816] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0053.817] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0053.817] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0053.817] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0053.817] lstrlenW (lpString="csrss.exe") returned 9
	[0053.817] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0053.817] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0053.817] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0053.817] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0053.817] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0053.817] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0053.817] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0053.817] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0053.818] lstrlenW (lpString="wininit.exe") returned 11
	[0053.818] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0053.818] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0053.818] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0053.818] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0053.819] lstrlenW (lpString="csrss.exe") returned 9
	[0053.819] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0053.820] lstrlenW (lpString="winlogon.exe") returned 12
	[0053.820] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0053.820] lstrlenW (lpString="services.exe") returned 12
	[0053.820] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0053.821] lstrlenW (lpString="lsass.exe") returned 9
	[0053.821] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0053.822] lstrlenW (lpString="lsm.exe") returned 7
	[0053.822] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.823] lstrlenW (lpString="svchost.exe") returned 11
	[0053.823] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.823] lstrlenW (lpString="svchost.exe") returned 11
	[0053.823] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.824] lstrlenW (lpString="svchost.exe") returned 11
	[0053.824] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.825] lstrlenW (lpString="svchost.exe") returned 11
	[0053.825] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.825] lstrlenW (lpString="svchost.exe") returned 11
	[0053.825] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0053.826] lstrlenW (lpString="audiodg.exe") returned 11
	[0053.826] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.827] lstrlenW (lpString="svchost.exe") returned 11
	[0053.827] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.827] lstrlenW (lpString="svchost.exe") returned 11
	[0053.828] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0053.828] lstrlenW (lpString="dwm.exe") returned 7
	[0053.828] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0053.829] lstrlenW (lpString="explorer.exe") returned 12
	[0053.829] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0053.830] lstrlenW (lpString="spoolsv.exe") returned 11
	[0053.830] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0053.830] lstrlenW (lpString="taskhost.exe") returned 12
	[0053.830] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.831] lstrlenW (lpString="svchost.exe") returned 11
	[0053.831] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0053.832] lstrlenW (lpString="taskeng.exe") returned 11
	[0053.832] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0053.832] lstrlenW (lpString="taskhost.exe") returned 12
	[0053.833] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0053.833] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0053.833] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0053.834] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0053.834] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0053.835] lstrlenW (lpString="possibilities.exe") returned 17
	[0053.835] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0053.835] lstrlenW (lpString="wilson.exe") returned 10
	[0053.835] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0053.836] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0053.836] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0053.837] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0053.837] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0053.837] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0053.838] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0053.838] lstrlenW (lpString="crisis.exe") returned 10
	[0053.838] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0053.839] lstrlenW (lpString="dramatically.exe") returned 16
	[0053.839] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0053.840] lstrlenW (lpString="rocket.exe") returned 10
	[0053.840] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0053.840] lstrlenW (lpString="warrant.exe") returned 11
	[0053.840] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0053.841] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0053.841] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0053.842] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0053.842] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0053.843] lstrlenW (lpString="israel.exe") returned 10
	[0053.843] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0053.890] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0053.895] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0053.917] lstrlenW (lpString="toxic chain.exe") returned 15
	[0053.921] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0053.953] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0053.954] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0053.954] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0053.954] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0053.955] lstrlenW (lpString="demo.exe") returned 8
	[0053.955] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0053.956] lstrlenW (lpString="cmd.exe") returned 7
	[0053.956] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0053.956] lstrlenW (lpString="conhost.exe") returned 11
	[0053.956] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0053.957] lstrlenW (lpString="vssadmin.exe") returned 12
	[0053.957] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0053.958] lstrlenW (lpString="VSSVC.exe") returned 9
	[0053.958] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.958] lstrlenW (lpString="svchost.exe") returned 11
	[0053.959] Process32NextW (in: hSnapshot=0x16c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0053.959] CloseHandle (hObject=0x16c) returned 1
	[0053.959] Sleep (dwMilliseconds=0x1f4) 
	[0054.920] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e7678
	[0054.920] EnumServicesStatusExW (in: hSCManager=0x53e7678, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0054.921] GetLastError () returned 0xea
	[0054.921] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8d5d120
	[0054.921] EnumServicesStatusExW (in: hSCManager=0x53e7678, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8d5d120, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8d5d120, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0054.921] CloseServiceHandle (hSCObject=0x53e7678) returned 1
	[0054.921] lstrlenW (lpString="Appinfo") returned 7
	[0054.921] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0054.921] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0054.921] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0054.921] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0054.921] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0054.921] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0054.922] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0054.922] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0054.922] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0054.922] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0054.922] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0054.922] lstrlenW (lpString="AudioSrv") returned 8
	[0054.922] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0054.922] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0054.922] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0054.922] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0054.922] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0054.922] lstrlenW (lpString="BFE") returned 3
	[0054.922] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0054.922] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0054.922] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0054.922] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0054.922] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0054.922] lstrlenW (lpString="CryptSvc") returned 8
	[0054.922] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0054.922] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0054.922] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0054.922] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0054.922] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0054.922] lstrlenW (lpString="CscService") returned 10
	[0054.922] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0054.922] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0054.922] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0054.922] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0054.922] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0054.922] lstrlenW (lpString="DcomLaunch") returned 10
	[0054.922] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0054.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0054.923] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0054.923] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0054.923] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0054.923] lstrlenW (lpString="Dhcp") returned 4
	[0054.923] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0054.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0054.923] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0054.923] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0054.923] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0054.923] lstrlenW (lpString="Dnscache") returned 8
	[0054.923] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0054.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0054.923] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0054.923] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0054.923] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0054.923] lstrlenW (lpString="DPS") returned 3
	[0054.923] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0054.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0054.923] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0054.923] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0054.923] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0054.923] lstrlenW (lpString="eventlog") returned 8
	[0054.923] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0054.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0054.923] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0054.923] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0054.923] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0054.923] lstrlenW (lpString="EventSystem") returned 11
	[0054.923] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0054.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0054.924] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0054.924] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0054.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0054.924] lstrlenW (lpString="gpsvc") returned 5
	[0054.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0054.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0054.924] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0054.924] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0054.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0054.924] lstrlenW (lpString="iphlpsvc") returned 8
	[0054.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0054.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0054.924] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0054.924] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0054.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0054.924] lstrlenW (lpString="LanmanServer") returned 12
	[0054.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0054.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0054.924] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0054.924] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0054.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0054.924] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0054.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0054.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0054.924] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0054.924] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0054.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0054.924] lstrlenW (lpString="lmhosts") returned 7
	[0054.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0054.925] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0054.925] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0054.925] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0054.925] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0054.925] lstrlenW (lpString="MMCSS") returned 5
	[0054.925] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0054.925] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0054.925] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0054.925] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0054.925] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0054.925] lstrlenW (lpString="MpsSvc") returned 6
	[0054.925] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0054.925] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0054.925] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0054.925] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0054.925] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0054.925] lstrlenW (lpString="Netman") returned 6
	[0054.925] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0054.925] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0054.925] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0054.925] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0054.925] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0054.925] lstrlenW (lpString="netprofm") returned 8
	[0054.925] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0054.925] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0054.925] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0054.925] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0054.925] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0054.925] lstrlenW (lpString="NlaSvc") returned 6
	[0054.925] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0054.926] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0054.926] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0054.926] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0054.926] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0054.926] lstrlenW (lpString="nsi") returned 3
	[0054.926] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0054.926] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0054.926] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0054.926] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0054.926] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0054.926] lstrlenW (lpString="PcaSvc") returned 6
	[0054.926] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0054.926] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0054.926] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0054.926] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0054.926] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0054.926] lstrlenW (lpString="PlugPlay") returned 8
	[0054.926] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0054.926] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0054.926] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0054.926] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0054.926] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0054.926] lstrlenW (lpString="Power") returned 5
	[0054.926] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0054.926] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0054.926] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0054.926] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0054.926] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0054.926] lstrlenW (lpString="ProfSvc") returned 7
	[0054.926] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0054.926] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0054.927] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0054.927] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0054.927] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0054.927] lstrlenW (lpString="RpcEptMapper") returned 12
	[0054.927] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0054.927] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0054.927] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0054.927] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0054.927] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0054.927] lstrlenW (lpString="RpcSs") returned 5
	[0054.927] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0054.927] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0054.927] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0054.927] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0054.927] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0054.927] lstrlenW (lpString="SamSs") returned 5
	[0054.927] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0054.927] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0054.927] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0054.927] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0054.927] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0054.927] lstrlenW (lpString="Schedule") returned 8
	[0054.927] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0054.927] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0054.927] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0054.927] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0054.927] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0054.927] lstrlenW (lpString="SENS") returned 4
	[0054.927] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0054.927] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0054.928] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0054.928] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0054.928] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0054.928] lstrlenW (lpString="ShellHWDetection") returned 16
	[0054.928] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0054.928] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0054.928] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0054.928] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0054.928] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0054.928] lstrlenW (lpString="Spooler") returned 7
	[0054.928] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0054.928] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0054.928] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0054.928] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0054.928] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0054.928] lstrlenW (lpString="swprv") returned 5
	[0054.928] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0054.928] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0054.928] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0054.928] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0054.928] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0054.928] lstrlenW (lpString="SysMain") returned 7
	[0054.928] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0054.928] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0054.928] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0054.928] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0054.928] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0054.928] lstrlenW (lpString="Themes") returned 6
	[0054.928] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0054.928] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0054.928] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0054.929] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0054.929] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0054.929] lstrlenW (lpString="TrkWks") returned 6
	[0054.929] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0054.929] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0054.929] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0054.929] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0054.929] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0054.929] lstrlenW (lpString="UxSms") returned 5
	[0054.929] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0054.929] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0054.929] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0054.929] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0054.929] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0054.929] lstrlenW (lpString="VSS") returned 3
	[0054.929] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0054.929] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0054.929] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0054.929] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0054.929] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0054.929] lstrlenW (lpString="WdiServiceHost") returned 14
	[0054.929] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0054.929] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0054.929] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0054.929] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0054.929] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0054.929] lstrlenW (lpString="WdiSystemHost") returned 13
	[0054.929] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0054.929] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0054.929] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0054.929] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0054.929] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0054.930] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0054.930] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0054.930] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0054.930] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0054.930] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0054.930] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0054.930] lstrlenW (lpString="Winmgmt") returned 7
	[0054.930] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0054.930] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0054.930] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0054.930] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0054.930] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0054.930] lstrlenW (lpString="WPDBusEnum") returned 10
	[0054.930] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0054.930] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0054.930] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0054.930] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0054.930] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0054.930] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d5d120 | out: hHeap=0x5350000) returned 1
	[0054.930] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x228
	[0054.933] Process32FirstW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0054.933] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0054.934] lstrlenW (lpString="System") returned 6
	[0054.934] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0054.934] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0054.934] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0054.934] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0054.934] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0054.934] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0054.934] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0054.934] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0054.935] lstrlenW (lpString="smss.exe") returned 8
	[0054.935] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0054.935] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0054.935] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0054.935] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0054.936] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0054.936] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0054.936] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0054.936] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0054.936] lstrlenW (lpString="csrss.exe") returned 9
	[0054.936] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0054.936] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0054.936] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0054.936] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0054.937] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0054.937] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0054.937] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0054.937] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0054.937] lstrlenW (lpString="wininit.exe") returned 11
	[0054.937] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0054.937] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0054.937] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0054.938] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0054.938] lstrlenW (lpString="csrss.exe") returned 9
	[0054.938] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0054.939] lstrlenW (lpString="winlogon.exe") returned 12
	[0054.939] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0054.940] lstrlenW (lpString="services.exe") returned 12
	[0054.940] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0054.941] lstrlenW (lpString="lsass.exe") returned 9
	[0054.941] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0054.941] lstrlenW (lpString="lsm.exe") returned 7
	[0054.941] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.942] lstrlenW (lpString="svchost.exe") returned 11
	[0054.942] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.943] lstrlenW (lpString="svchost.exe") returned 11
	[0054.943] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.944] lstrlenW (lpString="svchost.exe") returned 11
	[0054.944] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.945] lstrlenW (lpString="svchost.exe") returned 11
	[0054.945] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.946] lstrlenW (lpString="svchost.exe") returned 11
	[0054.946] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0054.946] lstrlenW (lpString="audiodg.exe") returned 11
	[0054.946] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.947] lstrlenW (lpString="svchost.exe") returned 11
	[0054.947] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.948] lstrlenW (lpString="svchost.exe") returned 11
	[0054.948] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0054.949] lstrlenW (lpString="dwm.exe") returned 7
	[0054.949] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0054.949] lstrlenW (lpString="explorer.exe") returned 12
	[0054.950] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0054.950] lstrlenW (lpString="spoolsv.exe") returned 11
	[0054.950] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0054.960] lstrlenW (lpString="taskhost.exe") returned 12
	[0054.960] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.961] lstrlenW (lpString="svchost.exe") returned 11
	[0054.961] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0054.962] lstrlenW (lpString="taskeng.exe") returned 11
	[0054.962] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0054.962] lstrlenW (lpString="taskhost.exe") returned 12
	[0054.962] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0054.963] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0054.963] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0054.964] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0054.964] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0054.965] lstrlenW (lpString="possibilities.exe") returned 17
	[0054.965] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0054.965] lstrlenW (lpString="wilson.exe") returned 10
	[0054.966] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0054.966] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0055.305] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0055.311] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0055.311] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0055.312] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0055.312] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0055.313] lstrlenW (lpString="crisis.exe") returned 10
	[0055.313] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0055.314] lstrlenW (lpString="dramatically.exe") returned 16
	[0055.314] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0055.314] lstrlenW (lpString="rocket.exe") returned 10
	[0055.314] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0055.315] lstrlenW (lpString="warrant.exe") returned 11
	[0055.315] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0055.316] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0055.316] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0055.316] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0055.317] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0055.317] lstrlenW (lpString="israel.exe") returned 10
	[0055.317] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0055.318] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0055.318] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0055.319] lstrlenW (lpString="toxic chain.exe") returned 15
	[0055.319] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0055.319] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0055.319] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0055.320] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0055.320] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0055.321] lstrlenW (lpString="demo.exe") returned 8
	[0055.321] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0055.321] lstrlenW (lpString="cmd.exe") returned 7
	[0055.322] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0055.322] lstrlenW (lpString="conhost.exe") returned 11
	[0055.322] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0055.323] lstrlenW (lpString="vssadmin.exe") returned 12
	[0055.323] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0055.324] lstrlenW (lpString="VSSVC.exe") returned 9
	[0055.324] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0055.324] lstrlenW (lpString="svchost.exe") returned 11
	[0055.324] Process32NextW (in: hSnapshot=0x228, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0055.325] CloseHandle (hObject=0x228) returned 1
	[0055.325] Sleep (dwMilliseconds=0x1f4) 
	[0056.049] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e7790
	[0056.049] EnumServicesStatusExW (in: hSCManager=0x53e7790, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0056.049] GetLastError () returned 0xea
	[0056.049] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x82290c8
	[0056.050] EnumServicesStatusExW (in: hSCManager=0x53e7790, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x82290c8, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x82290c8, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0056.050] CloseServiceHandle (hSCObject=0x53e7790) returned 1
	[0056.050] lstrlenW (lpString="Appinfo") returned 7
	[0056.051] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0056.051] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0056.051] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0056.051] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0056.051] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0056.051] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0056.051] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0056.051] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0056.051] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0056.051] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0056.051] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0056.051] lstrlenW (lpString="AudioSrv") returned 8
	[0056.051] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0056.051] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0056.051] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0056.051] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0056.051] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0056.051] lstrlenW (lpString="BFE") returned 3
	[0056.051] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0056.051] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0056.051] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0056.051] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0056.051] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0056.051] lstrlenW (lpString="CryptSvc") returned 8
	[0056.051] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0056.051] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0056.051] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0056.051] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0056.051] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0056.051] lstrlenW (lpString="CscService") returned 10
	[0056.051] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0056.051] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0056.051] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0056.052] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0056.052] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0056.052] lstrlenW (lpString="DcomLaunch") returned 10
	[0056.052] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0056.052] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0056.052] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0056.052] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0056.052] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0056.052] lstrlenW (lpString="Dhcp") returned 4
	[0056.052] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0056.052] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0056.052] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0056.052] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0056.052] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0056.052] lstrlenW (lpString="Dnscache") returned 8
	[0056.052] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0056.052] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0056.052] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0056.052] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0056.052] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0056.052] lstrlenW (lpString="DPS") returned 3
	[0056.052] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0056.052] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0056.052] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0056.052] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0056.052] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0056.052] lstrlenW (lpString="eventlog") returned 8
	[0056.052] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0056.052] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0056.052] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0056.052] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0056.052] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0056.052] lstrlenW (lpString="EventSystem") returned 11
	[0056.053] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0056.053] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0056.053] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0056.053] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0056.053] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0056.053] lstrlenW (lpString="gpsvc") returned 5
	[0056.053] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0056.053] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0056.053] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0056.053] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0056.053] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0056.053] lstrlenW (lpString="iphlpsvc") returned 8
	[0056.053] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0056.053] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0056.053] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0056.053] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0056.053] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0056.053] lstrlenW (lpString="LanmanServer") returned 12
	[0056.053] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0056.053] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0056.053] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0056.053] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0056.053] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0056.053] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0056.053] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0056.053] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0056.053] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0056.053] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0056.053] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0056.053] lstrlenW (lpString="lmhosts") returned 7
	[0056.053] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0056.053] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0056.053] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0056.054] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0056.054] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0056.054] lstrlenW (lpString="MMCSS") returned 5
	[0056.054] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0056.054] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0056.054] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0056.054] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0056.054] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0056.054] lstrlenW (lpString="MpsSvc") returned 6
	[0056.054] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0056.054] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0056.054] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0056.054] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0056.054] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0056.054] lstrlenW (lpString="Netman") returned 6
	[0056.054] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0056.054] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0056.054] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0056.054] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0056.054] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0056.054] lstrlenW (lpString="netprofm") returned 8
	[0056.054] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0056.054] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0056.054] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0056.054] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0056.054] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0056.054] lstrlenW (lpString="NlaSvc") returned 6
	[0056.054] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0056.054] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0056.054] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0056.054] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0056.054] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0056.054] lstrlenW (lpString="nsi") returned 3
	[0056.055] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0056.055] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0056.055] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0056.055] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0056.055] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0056.055] lstrlenW (lpString="PcaSvc") returned 6
	[0056.055] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0056.055] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0056.055] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0056.055] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0056.055] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0056.055] lstrlenW (lpString="PlugPlay") returned 8
	[0056.055] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0056.055] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0056.055] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0056.055] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0056.055] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0056.055] lstrlenW (lpString="Power") returned 5
	[0056.055] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0056.055] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0056.055] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0056.055] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0056.055] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0056.055] lstrlenW (lpString="ProfSvc") returned 7
	[0056.055] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0056.055] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0056.055] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0056.055] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0056.055] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0056.055] lstrlenW (lpString="RpcEptMapper") returned 12
	[0056.055] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0056.055] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0056.055] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0056.056] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0056.056] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0056.056] lstrlenW (lpString="RpcSs") returned 5
	[0056.056] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0056.056] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0056.056] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0056.056] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0056.056] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0056.056] lstrlenW (lpString="SamSs") returned 5
	[0056.056] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0056.056] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0056.056] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0056.056] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0056.056] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0056.056] lstrlenW (lpString="Schedule") returned 8
	[0056.056] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0056.056] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0056.056] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0056.056] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0056.056] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0056.056] lstrlenW (lpString="SENS") returned 4
	[0056.056] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0056.056] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0056.056] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0056.056] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0056.056] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0056.056] lstrlenW (lpString="ShellHWDetection") returned 16
	[0056.056] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0056.056] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0056.056] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0056.056] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0056.056] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0056.056] lstrlenW (lpString="Spooler") returned 7
	[0056.057] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0056.057] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0056.057] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0056.057] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0056.057] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0056.057] lstrlenW (lpString="swprv") returned 5
	[0056.057] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0056.057] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0056.057] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0056.057] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0056.057] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0056.057] lstrlenW (lpString="SysMain") returned 7
	[0056.057] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0056.057] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0056.057] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0056.057] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0056.057] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0056.057] lstrlenW (lpString="Themes") returned 6
	[0056.057] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0056.057] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0056.057] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0056.057] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0056.057] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0056.057] lstrlenW (lpString="TrkWks") returned 6
	[0056.057] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0056.057] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0056.057] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0056.057] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0056.057] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0056.057] lstrlenW (lpString="UxSms") returned 5
	[0056.057] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0056.057] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0056.057] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0056.058] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0056.058] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0056.058] lstrlenW (lpString="VSS") returned 3
	[0056.058] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0056.058] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0056.058] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0056.058] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0056.058] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0056.058] lstrlenW (lpString="WdiServiceHost") returned 14
	[0056.058] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0056.058] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0056.058] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0056.058] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0056.058] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0056.058] lstrlenW (lpString="WdiSystemHost") returned 13
	[0056.058] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0056.058] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0056.058] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0056.058] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0056.058] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0056.058] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0056.058] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0056.058] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0056.058] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0056.058] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0056.059] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0056.059] lstrlenW (lpString="Winmgmt") returned 7
	[0056.059] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0056.059] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0056.059] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0056.059] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0056.059] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0056.059] lstrlenW (lpString="WPDBusEnum") returned 10
	[0056.059] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0056.059] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0056.059] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0056.059] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0056.059] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0056.059] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x82290c8 | out: hHeap=0x5350000) returned 1
	[0056.059] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x214
	[0056.061] Process32FirstW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0056.062] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0056.063] lstrlenW (lpString="System") returned 6
	[0056.063] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0056.063] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0056.063] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0056.063] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0056.063] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0056.063] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0056.063] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0056.063] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0056.064] lstrlenW (lpString="smss.exe") returned 8
	[0056.064] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0056.064] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0056.064] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0056.064] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0056.064] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0056.064] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0056.064] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0056.064] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0056.064] lstrlenW (lpString="csrss.exe") returned 9
	[0056.065] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0056.065] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0056.065] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0056.065] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0056.065] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0056.065] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0056.065] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0056.065] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0056.065] lstrlenW (lpString="wininit.exe") returned 11
	[0056.065] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0056.065] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0056.066] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0056.066] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0056.066] lstrlenW (lpString="csrss.exe") returned 9
	[0056.066] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0056.067] lstrlenW (lpString="winlogon.exe") returned 12
	[0056.067] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0056.068] lstrlenW (lpString="services.exe") returned 12
	[0056.068] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0056.069] lstrlenW (lpString="lsass.exe") returned 9
	[0056.069] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0056.069] lstrlenW (lpString="lsm.exe") returned 7
	[0056.069] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.070] lstrlenW (lpString="svchost.exe") returned 11
	[0056.070] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.071] lstrlenW (lpString="svchost.exe") returned 11
	[0056.071] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.071] lstrlenW (lpString="svchost.exe") returned 11
	[0056.071] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.072] lstrlenW (lpString="svchost.exe") returned 11
	[0056.072] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.073] lstrlenW (lpString="svchost.exe") returned 11
	[0056.073] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0056.074] lstrlenW (lpString="audiodg.exe") returned 11
	[0056.074] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.074] lstrlenW (lpString="svchost.exe") returned 11
	[0056.074] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.075] lstrlenW (lpString="svchost.exe") returned 11
	[0056.075] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0056.076] lstrlenW (lpString="dwm.exe") returned 7
	[0056.076] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0056.077] lstrlenW (lpString="explorer.exe") returned 12
	[0056.077] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0056.077] lstrlenW (lpString="spoolsv.exe") returned 11
	[0056.077] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0056.078] lstrlenW (lpString="taskhost.exe") returned 12
	[0056.078] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.079] lstrlenW (lpString="svchost.exe") returned 11
	[0056.079] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0056.079] lstrlenW (lpString="taskeng.exe") returned 11
	[0056.080] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0056.080] lstrlenW (lpString="taskhost.exe") returned 12
	[0056.080] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0056.081] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0056.081] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0056.082] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0056.082] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0056.082] lstrlenW (lpString="possibilities.exe") returned 17
	[0056.082] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0056.083] lstrlenW (lpString="wilson.exe") returned 10
	[0056.083] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0056.084] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0056.084] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0056.084] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0056.085] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0056.085] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0056.085] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0056.700] lstrlenW (lpString="crisis.exe") returned 10
	[0056.702] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0056.716] lstrlenW (lpString="dramatically.exe") returned 16
	[0056.720] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0057.006] lstrlenW (lpString="rocket.exe") returned 10
	[0057.046] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0057.048] lstrlenW (lpString="warrant.exe") returned 11
	[0057.048] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0057.052] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0057.052] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0057.056] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0057.056] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0057.056] lstrlenW (lpString="israel.exe") returned 10
	[0057.056] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0057.057] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0057.057] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0057.058] lstrlenW (lpString="toxic chain.exe") returned 15
	[0057.058] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0057.065] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0057.065] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0057.067] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0057.067] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0057.067] lstrlenW (lpString="demo.exe") returned 8
	[0057.068] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0057.068] lstrlenW (lpString="cmd.exe") returned 7
	[0057.068] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0057.069] lstrlenW (lpString="conhost.exe") returned 11
	[0057.069] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0057.070] lstrlenW (lpString="vssadmin.exe") returned 12
	[0057.070] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0057.070] lstrlenW (lpString="VSSVC.exe") returned 9
	[0057.070] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.071] lstrlenW (lpString="svchost.exe") returned 11
	[0057.071] Process32NextW (in: hSnapshot=0x214, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0057.072] CloseHandle (hObject=0x214) returned 1
	[0057.072] Sleep (dwMilliseconds=0x1f4) 
	[0057.741] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x8220100
	[0057.741] EnumServicesStatusExW (in: hSCManager=0x8220100, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0057.742] GetLastError () returned 0xea
	[0057.742] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8cb20c0
	[0057.742] EnumServicesStatusExW (in: hSCManager=0x8220100, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8cb20c0, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8cb20c0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0057.742] CloseServiceHandle (hSCObject=0x8220100) returned 1
	[0057.742] lstrlenW (lpString="Appinfo") returned 7
	[0057.742] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0057.743] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0057.743] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0057.743] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0057.743] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0057.743] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0057.743] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0057.743] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0057.743] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0057.743] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0057.743] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0057.743] lstrlenW (lpString="AudioSrv") returned 8
	[0057.743] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0057.743] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0057.743] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0057.743] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0057.743] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0057.743] lstrlenW (lpString="BFE") returned 3
	[0057.743] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0057.743] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0057.743] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0057.743] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0057.743] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0057.743] lstrlenW (lpString="CryptSvc") returned 8
	[0057.743] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0057.743] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0057.743] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0057.744] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0057.744] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0057.744] lstrlenW (lpString="CscService") returned 10
	[0057.744] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0057.744] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0057.744] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0057.744] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0057.744] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0057.744] lstrlenW (lpString="DcomLaunch") returned 10
	[0057.744] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0057.744] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0057.744] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0057.744] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0057.744] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0057.744] lstrlenW (lpString="Dhcp") returned 4
	[0057.744] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0057.744] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0057.744] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0057.744] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0057.744] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0057.744] lstrlenW (lpString="Dnscache") returned 8
	[0057.744] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0057.744] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0057.744] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0057.744] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0057.744] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0057.744] lstrlenW (lpString="DPS") returned 3
	[0057.744] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0057.744] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0057.744] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0057.744] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0057.744] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0057.745] lstrlenW (lpString="eventlog") returned 8
	[0057.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0057.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0057.745] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0057.745] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0057.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0057.745] lstrlenW (lpString="EventSystem") returned 11
	[0057.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0057.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0057.745] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0057.745] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0057.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0057.745] lstrlenW (lpString="gpsvc") returned 5
	[0057.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0057.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0057.745] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0057.745] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0057.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0057.745] lstrlenW (lpString="iphlpsvc") returned 8
	[0057.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0057.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0057.745] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0057.745] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0057.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0057.745] lstrlenW (lpString="LanmanServer") returned 12
	[0057.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0057.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0057.745] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0057.745] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0057.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0057.745] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0057.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0057.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0057.746] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0057.746] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0057.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0057.746] lstrlenW (lpString="lmhosts") returned 7
	[0057.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0057.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0057.746] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0057.746] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0057.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0057.746] lstrlenW (lpString="MMCSS") returned 5
	[0057.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0057.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0057.746] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0057.746] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0057.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0057.746] lstrlenW (lpString="MpsSvc") returned 6
	[0057.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0057.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0057.746] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0057.746] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0057.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0057.746] lstrlenW (lpString="Netman") returned 6
	[0057.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0057.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0057.746] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0057.746] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0057.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0057.746] lstrlenW (lpString="netprofm") returned 8
	[0057.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0057.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0057.747] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0057.747] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0057.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0057.747] lstrlenW (lpString="NlaSvc") returned 6
	[0057.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0057.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0057.747] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0057.747] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0057.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0057.747] lstrlenW (lpString="nsi") returned 3
	[0057.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0057.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0057.747] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0057.747] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0057.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0057.747] lstrlenW (lpString="PcaSvc") returned 6
	[0057.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0057.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0057.747] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0057.747] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0057.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0057.747] lstrlenW (lpString="PlugPlay") returned 8
	[0057.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0057.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0057.747] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0057.747] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0057.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0057.747] lstrlenW (lpString="Power") returned 5
	[0057.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0057.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0057.748] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0057.748] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0057.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0057.748] lstrlenW (lpString="ProfSvc") returned 7
	[0057.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0057.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0057.748] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0057.748] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0057.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0057.748] lstrlenW (lpString="RpcEptMapper") returned 12
	[0057.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0057.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0057.748] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0057.748] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0057.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0057.748] lstrlenW (lpString="RpcSs") returned 5
	[0057.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0057.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0057.748] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0057.748] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0057.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0057.748] lstrlenW (lpString="SamSs") returned 5
	[0057.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0057.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0057.748] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0057.748] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0057.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0057.748] lstrlenW (lpString="Schedule") returned 8
	[0057.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0057.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0057.748] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0057.748] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0057.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0057.749] lstrlenW (lpString="SENS") returned 4
	[0057.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0057.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0057.749] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0057.749] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0057.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0057.749] lstrlenW (lpString="ShellHWDetection") returned 16
	[0057.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0057.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0057.749] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0057.749] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0057.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0057.749] lstrlenW (lpString="Spooler") returned 7
	[0057.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0057.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0057.749] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0057.749] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0057.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0057.749] lstrlenW (lpString="swprv") returned 5
	[0057.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0057.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0057.749] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0057.749] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0057.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0057.749] lstrlenW (lpString="SysMain") returned 7
	[0057.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0057.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0057.749] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0057.749] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0057.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0057.749] lstrlenW (lpString="Themes") returned 6
	[0057.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0057.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0057.750] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0057.750] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0057.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0057.750] lstrlenW (lpString="TrkWks") returned 6
	[0057.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0057.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0057.750] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0057.750] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0057.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0057.750] lstrlenW (lpString="UxSms") returned 5
	[0057.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0057.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0057.750] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0057.750] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0057.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0057.750] lstrlenW (lpString="VSS") returned 3
	[0057.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0057.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0057.750] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0057.750] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0057.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0057.750] lstrlenW (lpString="WdiServiceHost") returned 14
	[0057.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0057.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0057.750] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0057.750] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0057.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0057.750] lstrlenW (lpString="WdiSystemHost") returned 13
	[0057.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0057.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0057.751] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0057.751] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0057.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0057.751] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0057.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0057.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0057.751] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0057.751] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0057.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0057.751] lstrlenW (lpString="Winmgmt") returned 7
	[0057.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0057.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0057.751] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0057.751] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0057.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0057.751] lstrlenW (lpString="WPDBusEnum") returned 10
	[0057.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0057.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0057.751] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0057.751] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0057.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0057.751] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb20c0 | out: hHeap=0x5350000) returned 1
	[0057.751] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ec
	[0057.754] Process32FirstW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0057.754] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0057.755] lstrlenW (lpString="System") returned 6
	[0057.755] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0057.755] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0057.755] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0057.755] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0057.755] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0057.755] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0057.755] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0057.755] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0057.756] lstrlenW (lpString="smss.exe") returned 8
	[0057.756] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0057.756] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0057.756] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0057.756] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0057.756] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0057.756] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0057.756] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0057.756] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0057.757] lstrlenW (lpString="csrss.exe") returned 9
	[0057.757] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0057.757] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0057.757] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0057.757] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0057.757] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0057.757] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0057.757] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0057.757] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0057.758] lstrlenW (lpString="wininit.exe") returned 11
	[0057.758] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0057.758] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0057.758] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0057.758] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0057.766] lstrlenW (lpString="csrss.exe") returned 9
	[0057.766] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0057.766] lstrlenW (lpString="winlogon.exe") returned 12
	[0057.767] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0057.767] lstrlenW (lpString="services.exe") returned 12
	[0057.767] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0057.768] lstrlenW (lpString="lsass.exe") returned 9
	[0057.768] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0057.769] lstrlenW (lpString="lsm.exe") returned 7
	[0057.769] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.769] lstrlenW (lpString="svchost.exe") returned 11
	[0057.770] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.770] lstrlenW (lpString="svchost.exe") returned 11
	[0057.770] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.771] lstrlenW (lpString="svchost.exe") returned 11
	[0057.771] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.772] lstrlenW (lpString="svchost.exe") returned 11
	[0057.772] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.773] lstrlenW (lpString="svchost.exe") returned 11
	[0057.773] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0057.773] lstrlenW (lpString="audiodg.exe") returned 11
	[0057.773] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.774] lstrlenW (lpString="svchost.exe") returned 11
	[0057.774] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.775] lstrlenW (lpString="svchost.exe") returned 11
	[0057.775] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0057.775] lstrlenW (lpString="dwm.exe") returned 7
	[0057.776] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0057.776] lstrlenW (lpString="explorer.exe") returned 12
	[0057.776] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0057.777] lstrlenW (lpString="spoolsv.exe") returned 11
	[0057.777] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0057.778] lstrlenW (lpString="taskhost.exe") returned 12
	[0057.778] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.779] lstrlenW (lpString="svchost.exe") returned 11
	[0057.779] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0057.780] lstrlenW (lpString="taskeng.exe") returned 11
	[0057.780] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0057.780] lstrlenW (lpString="taskhost.exe") returned 12
	[0057.781] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0057.781] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0057.781] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0057.782] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0057.782] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0057.783] lstrlenW (lpString="possibilities.exe") returned 17
	[0057.783] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0057.783] lstrlenW (lpString="wilson.exe") returned 10
	[0057.783] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0057.784] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0057.784] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0057.785] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0057.785] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0057.786] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0057.786] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0058.300] lstrlenW (lpString="crisis.exe") returned 10
	[0058.301] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0058.314] lstrlenW (lpString="dramatically.exe") returned 16
	[0058.316] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0058.623] lstrlenW (lpString="rocket.exe") returned 10
	[0058.623] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0058.625] lstrlenW (lpString="warrant.exe") returned 11
	[0058.626] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0058.635] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0058.636] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0058.640] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0058.640] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0058.641] lstrlenW (lpString="israel.exe") returned 10
	[0058.641] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0058.642] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0058.642] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0058.642] lstrlenW (lpString="toxic chain.exe") returned 15
	[0058.642] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0058.643] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0058.643] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0058.644] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0058.644] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0058.645] lstrlenW (lpString="demo.exe") returned 8
	[0058.645] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0058.645] lstrlenW (lpString="cmd.exe") returned 7
	[0058.645] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0058.646] lstrlenW (lpString="conhost.exe") returned 11
	[0058.646] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0058.647] lstrlenW (lpString="vssadmin.exe") returned 12
	[0058.647] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0058.648] lstrlenW (lpString="VSSVC.exe") returned 9
	[0058.648] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.649] lstrlenW (lpString="svchost.exe") returned 11
	[0058.649] Process32NextW (in: hSnapshot=0x1ec, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0058.650] CloseHandle (hObject=0x1ec) returned 1
	[0058.650] Sleep (dwMilliseconds=0x1f4) 
	[0059.349] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e70b0
	[0059.350] EnumServicesStatusExW (in: hSCManager=0x53e70b0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0059.351] GetLastError () returned 0xea
	[0059.351] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8cb20c0
	[0059.351] EnumServicesStatusExW (in: hSCManager=0x53e70b0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8cb20c0, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8cb20c0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0059.352] CloseServiceHandle (hSCObject=0x53e70b0) returned 1
	[0059.352] lstrlenW (lpString="Appinfo") returned 7
	[0059.352] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0059.352] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0059.352] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0059.352] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0059.352] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0059.352] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0059.352] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0059.352] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0059.352] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0059.352] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0059.352] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0059.352] lstrlenW (lpString="AudioSrv") returned 8
	[0059.352] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0059.352] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0059.352] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0059.352] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0059.352] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0059.352] lstrlenW (lpString="BFE") returned 3
	[0059.352] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0059.352] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0059.352] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0059.352] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0059.352] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0059.352] lstrlenW (lpString="CryptSvc") returned 8
	[0059.352] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0059.353] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0059.353] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0059.353] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0059.353] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0059.353] lstrlenW (lpString="CscService") returned 10
	[0059.353] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0059.353] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0059.353] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0059.353] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0059.353] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0059.353] lstrlenW (lpString="DcomLaunch") returned 10
	[0059.353] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0059.353] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0059.353] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0059.353] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0059.353] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0059.353] lstrlenW (lpString="Dhcp") returned 4
	[0059.353] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0059.353] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0059.353] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0059.353] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0059.353] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0059.353] lstrlenW (lpString="Dnscache") returned 8
	[0059.353] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0059.353] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0059.353] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0059.353] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0059.353] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0059.353] lstrlenW (lpString="DPS") returned 3
	[0059.353] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0059.353] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0059.354] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0059.354] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0059.354] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0059.354] lstrlenW (lpString="eventlog") returned 8
	[0059.354] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0059.354] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0059.354] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0059.354] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0059.354] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0059.354] lstrlenW (lpString="EventSystem") returned 11
	[0059.354] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0059.354] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0059.354] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0059.354] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0059.354] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0059.354] lstrlenW (lpString="gpsvc") returned 5
	[0059.354] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0059.354] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0059.354] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0059.354] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0059.354] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0059.354] lstrlenW (lpString="iphlpsvc") returned 8
	[0059.354] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0059.354] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0059.354] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0059.354] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0059.354] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0059.354] lstrlenW (lpString="LanmanServer") returned 12
	[0059.354] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0059.354] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0059.354] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0059.354] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0059.355] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0059.355] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0059.355] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0059.355] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0059.355] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0059.355] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0059.355] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0059.355] lstrlenW (lpString="lmhosts") returned 7
	[0059.355] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0059.355] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0059.355] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0059.355] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0059.355] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0059.355] lstrlenW (lpString="MMCSS") returned 5
	[0059.355] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0059.355] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0059.355] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0059.355] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0059.355] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0059.355] lstrlenW (lpString="MpsSvc") returned 6
	[0059.355] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0059.355] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0059.355] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0059.355] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0059.355] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0059.355] lstrlenW (lpString="Netman") returned 6
	[0059.355] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0059.355] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0059.355] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0059.355] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0059.355] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0059.355] lstrlenW (lpString="netprofm") returned 8
	[0059.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0059.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0059.356] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0059.356] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0059.356] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0059.356] lstrlenW (lpString="NlaSvc") returned 6
	[0059.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0059.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0059.356] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0059.356] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0059.356] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0059.356] lstrlenW (lpString="nsi") returned 3
	[0059.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0059.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0059.356] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0059.356] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0059.356] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0059.356] lstrlenW (lpString="PcaSvc") returned 6
	[0059.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0059.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0059.356] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0059.356] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0059.356] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0059.356] lstrlenW (lpString="PlugPlay") returned 8
	[0059.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0059.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0059.356] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0059.356] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0059.356] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0059.356] lstrlenW (lpString="Power") returned 5
	[0059.356] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0059.356] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0059.357] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0059.357] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0059.357] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0059.357] lstrlenW (lpString="ProfSvc") returned 7
	[0059.357] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0059.357] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0059.357] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0059.357] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0059.357] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0059.357] lstrlenW (lpString="RpcEptMapper") returned 12
	[0059.357] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0059.357] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0059.357] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0059.357] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0059.357] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0059.357] lstrlenW (lpString="RpcSs") returned 5
	[0059.357] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0059.357] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0059.357] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0059.357] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0059.357] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0059.357] lstrlenW (lpString="SamSs") returned 5
	[0059.357] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0059.357] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0059.357] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0059.357] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0059.357] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0059.357] lstrlenW (lpString="Schedule") returned 8
	[0059.357] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0059.357] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0059.357] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0059.357] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0059.357] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0059.358] lstrlenW (lpString="SENS") returned 4
	[0059.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0059.358] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0059.358] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0059.358] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0059.358] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0059.358] lstrlenW (lpString="ShellHWDetection") returned 16
	[0059.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0059.358] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0059.358] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0059.358] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0059.358] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0059.358] lstrlenW (lpString="Spooler") returned 7
	[0059.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0059.358] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0059.358] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0059.358] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0059.358] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0059.358] lstrlenW (lpString="swprv") returned 5
	[0059.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0059.358] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0059.358] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0059.358] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0059.358] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0059.358] lstrlenW (lpString="SysMain") returned 7
	[0059.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0059.358] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0059.358] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0059.358] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0059.358] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0059.358] lstrlenW (lpString="Themes") returned 6
	[0059.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0059.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0059.359] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0059.359] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0059.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0059.359] lstrlenW (lpString="TrkWks") returned 6
	[0059.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0059.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0059.359] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0059.359] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0059.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0059.359] lstrlenW (lpString="UxSms") returned 5
	[0059.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0059.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0059.359] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0059.359] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0059.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0059.359] lstrlenW (lpString="VSS") returned 3
	[0059.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0059.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0059.359] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0059.359] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0059.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0059.359] lstrlenW (lpString="WdiServiceHost") returned 14
	[0059.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0059.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0059.359] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0059.359] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0059.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0059.359] lstrlenW (lpString="WdiSystemHost") returned 13
	[0059.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0059.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0059.360] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0059.360] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0059.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0059.360] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0059.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0059.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0059.360] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0059.360] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0059.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0059.360] lstrlenW (lpString="Winmgmt") returned 7
	[0059.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0059.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0059.360] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0059.360] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0059.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0059.360] lstrlenW (lpString="WPDBusEnum") returned 10
	[0059.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0059.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0059.360] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0059.360] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0059.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0059.360] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb20c0 | out: hHeap=0x5350000) returned 1
	[0059.360] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x238
	[0059.363] Process32FirstW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0059.363] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0059.364] lstrlenW (lpString="System") returned 6
	[0059.364] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0059.364] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0059.364] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0059.364] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0059.364] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0059.364] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0059.364] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0059.364] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0059.365] lstrlenW (lpString="smss.exe") returned 8
	[0059.365] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0059.365] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0059.365] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0059.365] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0059.365] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0059.365] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0059.365] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0059.365] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0059.366] lstrlenW (lpString="csrss.exe") returned 9
	[0059.366] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0059.366] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0059.366] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0059.366] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0059.366] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0059.366] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0059.366] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0059.366] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0059.367] lstrlenW (lpString="wininit.exe") returned 11
	[0059.367] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0059.367] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0059.367] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0059.367] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0059.368] lstrlenW (lpString="csrss.exe") returned 9
	[0059.368] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0059.369] lstrlenW (lpString="winlogon.exe") returned 12
	[0059.369] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0059.370] lstrlenW (lpString="services.exe") returned 12
	[0059.370] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0059.370] lstrlenW (lpString="lsass.exe") returned 9
	[0059.370] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0059.371] lstrlenW (lpString="lsm.exe") returned 7
	[0059.371] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.372] lstrlenW (lpString="svchost.exe") returned 11
	[0059.372] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.372] lstrlenW (lpString="svchost.exe") returned 11
	[0059.372] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.373] lstrlenW (lpString="svchost.exe") returned 11
	[0059.373] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.374] lstrlenW (lpString="svchost.exe") returned 11
	[0059.374] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.375] lstrlenW (lpString="svchost.exe") returned 11
	[0059.375] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0059.375] lstrlenW (lpString="audiodg.exe") returned 11
	[0059.375] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.376] lstrlenW (lpString="svchost.exe") returned 11
	[0059.376] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.377] lstrlenW (lpString="svchost.exe") returned 11
	[0059.377] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0059.378] lstrlenW (lpString="dwm.exe") returned 7
	[0059.378] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0059.378] lstrlenW (lpString="explorer.exe") returned 12
	[0059.378] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0059.379] lstrlenW (lpString="spoolsv.exe") returned 11
	[0059.379] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0059.380] lstrlenW (lpString="taskhost.exe") returned 12
	[0059.380] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.380] lstrlenW (lpString="svchost.exe") returned 11
	[0059.380] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0059.382] lstrlenW (lpString="taskeng.exe") returned 11
	[0059.382] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0059.383] lstrlenW (lpString="taskhost.exe") returned 12
	[0059.383] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0059.384] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0059.384] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0059.384] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0059.384] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0059.385] lstrlenW (lpString="possibilities.exe") returned 17
	[0059.385] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0059.386] lstrlenW (lpString="wilson.exe") returned 10
	[0059.386] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0059.387] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0059.387] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0059.387] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0059.387] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0059.388] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0059.388] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0059.433] lstrlenW (lpString="crisis.exe") returned 10
	[0059.433] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0059.434] lstrlenW (lpString="dramatically.exe") returned 16
	[0059.434] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0059.435] lstrlenW (lpString="rocket.exe") returned 10
	[0059.435] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0059.435] lstrlenW (lpString="warrant.exe") returned 11
	[0059.436] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0059.436] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0059.436] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0059.437] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0059.437] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0059.438] lstrlenW (lpString="israel.exe") returned 10
	[0059.438] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0059.438] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0059.439] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0059.439] lstrlenW (lpString="toxic chain.exe") returned 15
	[0059.439] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0059.440] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0059.440] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0059.441] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0059.441] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0059.441] lstrlenW (lpString="demo.exe") returned 8
	[0059.441] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0059.442] lstrlenW (lpString="cmd.exe") returned 7
	[0059.442] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0059.443] lstrlenW (lpString="conhost.exe") returned 11
	[0059.443] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0059.443] lstrlenW (lpString="vssadmin.exe") returned 12
	[0059.444] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0059.444] lstrlenW (lpString="VSSVC.exe") returned 9
	[0059.444] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.445] lstrlenW (lpString="svchost.exe") returned 11
	[0059.445] Process32NextW (in: hSnapshot=0x238, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0059.446] CloseHandle (hObject=0x238) returned 1
	[0059.446] Sleep (dwMilliseconds=0x1f4) 
	[0060.584] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e70b0
	[0060.584] EnumServicesStatusExW (in: hSCManager=0x53e70b0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0060.584] GetLastError () returned 0xea
	[0060.584] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x8cb20c0
	[0060.584] EnumServicesStatusExW (in: hSCManager=0x53e70b0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x8cb20c0, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x8cb20c0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0060.585] CloseServiceHandle (hSCObject=0x53e70b0) returned 1
	[0060.585] lstrlenW (lpString="Appinfo") returned 7
	[0060.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0060.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0060.585] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0060.585] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0060.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0060.585] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0060.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0060.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0060.585] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0060.585] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0060.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0060.585] lstrlenW (lpString="AudioSrv") returned 8
	[0060.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0060.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0060.586] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0060.586] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0060.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0060.586] lstrlenW (lpString="BFE") returned 3
	[0060.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0060.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0060.586] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0060.586] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0060.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0060.586] lstrlenW (lpString="CryptSvc") returned 8
	[0060.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0060.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0060.586] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0060.586] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0060.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0060.586] lstrlenW (lpString="CscService") returned 10
	[0060.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0060.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0060.586] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0060.586] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0060.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0060.586] lstrlenW (lpString="DcomLaunch") returned 10
	[0060.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0060.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0060.586] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0060.586] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0060.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0060.586] lstrlenW (lpString="Dhcp") returned 4
	[0060.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0060.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0060.586] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0060.586] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0060.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0060.586] lstrlenW (lpString="Dnscache") returned 8
	[0060.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0060.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0060.587] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0060.587] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0060.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0060.587] lstrlenW (lpString="DPS") returned 3
	[0060.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0060.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0060.587] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0060.587] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0060.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0060.587] lstrlenW (lpString="eventlog") returned 8
	[0060.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0060.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0060.587] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0060.587] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0060.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0060.587] lstrlenW (lpString="EventSystem") returned 11
	[0060.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0060.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0060.587] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0060.587] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0060.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0060.587] lstrlenW (lpString="gpsvc") returned 5
	[0060.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0060.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0060.587] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0060.587] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0060.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0060.587] lstrlenW (lpString="iphlpsvc") returned 8
	[0060.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0060.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0060.588] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0060.588] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0060.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0060.588] lstrlenW (lpString="LanmanServer") returned 12
	[0060.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0060.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0060.588] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0060.588] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0060.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0060.588] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0060.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0060.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0060.588] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0060.588] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0060.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0060.588] lstrlenW (lpString="lmhosts") returned 7
	[0060.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0060.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0060.588] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0060.588] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0060.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0060.588] lstrlenW (lpString="MMCSS") returned 5
	[0060.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0060.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0060.588] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0060.588] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0060.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0060.588] lstrlenW (lpString="MpsSvc") returned 6
	[0060.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0060.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0060.588] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0060.588] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0060.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0060.588] lstrlenW (lpString="Netman") returned 6
	[0060.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0060.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0060.589] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0060.589] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0060.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0060.589] lstrlenW (lpString="netprofm") returned 8
	[0060.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0060.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0060.589] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0060.589] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0060.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0060.589] lstrlenW (lpString="NlaSvc") returned 6
	[0060.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0060.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0060.589] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0060.589] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0060.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0060.589] lstrlenW (lpString="nsi") returned 3
	[0060.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0060.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0060.589] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0060.589] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0060.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0060.589] lstrlenW (lpString="PcaSvc") returned 6
	[0060.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0060.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0060.589] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0060.589] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0060.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0060.589] lstrlenW (lpString="PlugPlay") returned 8
	[0060.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0060.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0060.589] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0060.590] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0060.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0060.590] lstrlenW (lpString="Power") returned 5
	[0060.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0060.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0060.590] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0060.590] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0060.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0060.590] lstrlenW (lpString="ProfSvc") returned 7
	[0060.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0060.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0060.590] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0060.590] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0060.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0060.590] lstrlenW (lpString="RpcEptMapper") returned 12
	[0060.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0060.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0060.590] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0060.590] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0060.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0060.590] lstrlenW (lpString="RpcSs") returned 5
	[0060.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0060.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0060.590] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0060.590] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0060.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0060.590] lstrlenW (lpString="SamSs") returned 5
	[0060.590] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0060.590] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0060.590] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0060.590] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0060.590] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0060.591] lstrlenW (lpString="Schedule") returned 8
	[0060.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0060.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0060.591] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0060.591] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0060.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0060.591] lstrlenW (lpString="SENS") returned 4
	[0060.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0060.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0060.591] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0060.591] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0060.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0060.591] lstrlenW (lpString="ShellHWDetection") returned 16
	[0060.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0060.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0060.591] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0060.591] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0060.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0060.591] lstrlenW (lpString="Spooler") returned 7
	[0060.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0060.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0060.591] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0060.591] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0060.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0060.591] lstrlenW (lpString="swprv") returned 5
	[0060.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0060.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0060.591] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0060.591] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0060.591] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0060.591] lstrlenW (lpString="SysMain") returned 7
	[0060.591] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0060.591] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0060.592] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0060.592] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0060.592] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0060.592] lstrlenW (lpString="Themes") returned 6
	[0060.592] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0060.592] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0060.592] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0060.592] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0060.592] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0060.592] lstrlenW (lpString="TrkWks") returned 6
	[0060.592] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0060.592] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0060.592] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0060.592] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0060.592] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0060.592] lstrlenW (lpString="UxSms") returned 5
	[0060.592] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0060.592] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0060.592] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0060.592] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0060.592] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0060.592] lstrlenW (lpString="VSS") returned 3
	[0060.592] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0060.592] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0060.592] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0060.592] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0060.592] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0060.592] lstrlenW (lpString="WdiServiceHost") returned 14
	[0060.592] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0060.592] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0060.592] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0060.592] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0060.592] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0060.593] lstrlenW (lpString="WdiSystemHost") returned 13
	[0060.593] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0060.593] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0060.593] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0060.593] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0060.593] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0060.593] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0060.593] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0060.593] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0060.593] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0060.593] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0060.593] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0060.593] lstrlenW (lpString="Winmgmt") returned 7
	[0060.593] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0060.593] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0060.593] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0060.593] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0060.593] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0060.593] lstrlenW (lpString="WPDBusEnum") returned 10
	[0060.593] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0060.593] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0060.593] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0060.593] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0060.593] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0060.593] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb20c0 | out: hHeap=0x5350000) returned 1
	[0060.593] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f8
	[0060.596] Process32FirstW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0060.596] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0060.597] lstrlenW (lpString="System") returned 6
	[0060.597] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0060.597] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0060.597] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0060.597] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0060.597] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0060.597] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0060.597] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0060.597] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0060.598] lstrlenW (lpString="smss.exe") returned 8
	[0060.598] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0060.598] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0060.598] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0060.598] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0060.598] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0060.598] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0060.598] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0060.598] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0060.599] lstrlenW (lpString="csrss.exe") returned 9
	[0060.599] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0060.599] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0060.599] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0060.599] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0060.599] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0060.599] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0060.599] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0060.599] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0060.600] lstrlenW (lpString="wininit.exe") returned 11
	[0060.600] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0060.600] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0060.600] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0060.600] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0060.601] lstrlenW (lpString="csrss.exe") returned 9
	[0060.601] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0060.602] lstrlenW (lpString="winlogon.exe") returned 12
	[0060.602] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0060.602] lstrlenW (lpString="services.exe") returned 12
	[0060.602] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0060.603] lstrlenW (lpString="lsass.exe") returned 9
	[0060.603] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0060.604] lstrlenW (lpString="lsm.exe") returned 7
	[0060.604] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.605] lstrlenW (lpString="svchost.exe") returned 11
	[0060.605] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.605] lstrlenW (lpString="svchost.exe") returned 11
	[0060.605] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.606] lstrlenW (lpString="svchost.exe") returned 11
	[0060.606] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.607] lstrlenW (lpString="svchost.exe") returned 11
	[0060.607] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.607] lstrlenW (lpString="svchost.exe") returned 11
	[0060.608] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0060.608] lstrlenW (lpString="audiodg.exe") returned 11
	[0060.608] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.609] lstrlenW (lpString="svchost.exe") returned 11
	[0060.609] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.610] lstrlenW (lpString="svchost.exe") returned 11
	[0060.610] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0060.610] lstrlenW (lpString="dwm.exe") returned 7
	[0060.610] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0060.611] lstrlenW (lpString="explorer.exe") returned 12
	[0060.611] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0060.612] lstrlenW (lpString="spoolsv.exe") returned 11
	[0060.612] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0060.613] lstrlenW (lpString="taskhost.exe") returned 12
	[0060.613] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.613] lstrlenW (lpString="svchost.exe") returned 11
	[0060.613] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0060.614] lstrlenW (lpString="taskeng.exe") returned 11
	[0060.614] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0060.615] lstrlenW (lpString="taskhost.exe") returned 12
	[0060.615] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0060.616] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0060.616] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0060.616] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0060.616] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0060.617] lstrlenW (lpString="possibilities.exe") returned 17
	[0060.617] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0060.961] lstrlenW (lpString="wilson.exe") returned 10
	[0060.967] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0060.993] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0061.000] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0061.001] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0061.001] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0061.002] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0061.002] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0061.002] lstrlenW (lpString="crisis.exe") returned 10
	[0061.002] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0061.003] lstrlenW (lpString="dramatically.exe") returned 16
	[0061.003] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0061.004] lstrlenW (lpString="rocket.exe") returned 10
	[0061.004] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0061.005] lstrlenW (lpString="warrant.exe") returned 11
	[0061.005] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0061.005] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0061.005] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0061.006] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0061.006] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0061.007] lstrlenW (lpString="israel.exe") returned 10
	[0061.007] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0061.007] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0061.008] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0061.008] lstrlenW (lpString="toxic chain.exe") returned 15
	[0061.008] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0061.009] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0061.009] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0061.010] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0061.010] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0061.010] lstrlenW (lpString="demo.exe") returned 8
	[0061.010] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0061.011] lstrlenW (lpString="cmd.exe") returned 7
	[0061.011] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0061.012] lstrlenW (lpString="conhost.exe") returned 11
	[0061.012] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0061.013] lstrlenW (lpString="vssadmin.exe") returned 12
	[0061.013] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0061.013] lstrlenW (lpString="VSSVC.exe") returned 9
	[0061.013] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.014] lstrlenW (lpString="svchost.exe") returned 11
	[0061.014] Process32NextW (in: hSnapshot=0x1f8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0061.015] CloseHandle (hObject=0x1f8) returned 1
	[0061.015] Sleep (dwMilliseconds=0x1f4) 
	[0061.662] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e7510
	[0061.663] EnumServicesStatusExW (in: hSCManager=0x53e7510, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0061.663] GetLastError () returned 0xea
	[0061.663] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x9870050
	[0061.663] EnumServicesStatusExW (in: hSCManager=0x53e7510, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x9870050, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x9870050, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0061.664] CloseServiceHandle (hSCObject=0x53e7510) returned 1
	[0061.664] lstrlenW (lpString="Appinfo") returned 7
	[0061.664] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0061.664] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0061.664] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0061.664] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0061.664] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0061.664] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0061.664] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0061.664] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0061.664] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0061.664] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0061.664] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0061.664] lstrlenW (lpString="AudioSrv") returned 8
	[0061.664] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0061.664] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0061.664] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0061.664] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0061.664] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0061.664] lstrlenW (lpString="BFE") returned 3
	[0061.664] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0061.664] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0061.664] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0061.664] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0061.665] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0061.665] lstrlenW (lpString="CryptSvc") returned 8
	[0061.665] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0061.665] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0061.665] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0061.665] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0061.665] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0061.665] lstrlenW (lpString="CscService") returned 10
	[0061.665] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0061.665] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0061.665] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0061.665] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0061.665] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0061.665] lstrlenW (lpString="DcomLaunch") returned 10
	[0061.665] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0061.665] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0061.665] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0061.665] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0061.665] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0061.665] lstrlenW (lpString="Dhcp") returned 4
	[0061.665] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0061.665] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0061.665] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0061.665] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0061.665] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0061.665] lstrlenW (lpString="Dnscache") returned 8
	[0061.665] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0061.665] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0061.665] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0061.665] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0061.665] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0061.665] lstrlenW (lpString="DPS") returned 3
	[0061.666] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0061.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0061.666] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0061.666] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0061.666] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0061.666] lstrlenW (lpString="eventlog") returned 8
	[0061.666] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0061.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0061.666] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0061.666] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0061.666] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0061.666] lstrlenW (lpString="EventSystem") returned 11
	[0061.666] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0061.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0061.666] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0061.666] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0061.666] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0061.666] lstrlenW (lpString="gpsvc") returned 5
	[0061.666] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0061.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0061.666] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0061.666] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0061.666] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0061.666] lstrlenW (lpString="iphlpsvc") returned 8
	[0061.666] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0061.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0061.666] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0061.666] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0061.666] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0061.666] lstrlenW (lpString="LanmanServer") returned 12
	[0061.666] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0061.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0061.667] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0061.667] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0061.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0061.667] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0061.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0061.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0061.667] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0061.667] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0061.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0061.667] lstrlenW (lpString="lmhosts") returned 7
	[0061.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0061.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0061.667] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0061.667] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0061.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0061.667] lstrlenW (lpString="MMCSS") returned 5
	[0061.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0061.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0061.667] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0061.667] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0061.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0061.667] lstrlenW (lpString="MpsSvc") returned 6
	[0061.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0061.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0061.667] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0061.667] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0061.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0061.667] lstrlenW (lpString="Netman") returned 6
	[0061.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0061.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0061.667] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0061.668] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0061.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0061.668] lstrlenW (lpString="netprofm") returned 8
	[0061.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0061.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0061.668] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0061.668] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0061.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0061.668] lstrlenW (lpString="NlaSvc") returned 6
	[0061.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0061.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0061.668] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0061.668] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0061.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0061.668] lstrlenW (lpString="nsi") returned 3
	[0061.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0061.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0061.668] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0061.668] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0061.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0061.668] lstrlenW (lpString="PcaSvc") returned 6
	[0061.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0061.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0061.668] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0061.668] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0061.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0061.668] lstrlenW (lpString="PlugPlay") returned 8
	[0061.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0061.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0061.668] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0061.668] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0061.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0061.669] lstrlenW (lpString="Power") returned 5
	[0061.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0061.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0061.669] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0061.669] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0061.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0061.669] lstrlenW (lpString="ProfSvc") returned 7
	[0061.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0061.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0061.669] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0061.669] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0061.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0061.669] lstrlenW (lpString="RpcEptMapper") returned 12
	[0061.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0061.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0061.669] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0061.669] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0061.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0061.669] lstrlenW (lpString="RpcSs") returned 5
	[0061.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0061.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0061.669] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0061.669] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0061.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0061.669] lstrlenW (lpString="SamSs") returned 5
	[0061.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0061.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0061.669] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0061.669] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0061.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0061.669] lstrlenW (lpString="Schedule") returned 8
	[0061.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0061.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0061.670] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0061.670] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0061.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0061.670] lstrlenW (lpString="SENS") returned 4
	[0061.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0061.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0061.670] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0061.670] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0061.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0061.670] lstrlenW (lpString="ShellHWDetection") returned 16
	[0061.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0061.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0061.670] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0061.670] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0061.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0061.670] lstrlenW (lpString="Spooler") returned 7
	[0061.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0061.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0061.670] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0061.670] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0061.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0061.670] lstrlenW (lpString="swprv") returned 5
	[0061.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0061.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0061.670] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0061.670] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0061.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0061.670] lstrlenW (lpString="SysMain") returned 7
	[0061.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0061.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0061.671] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0061.671] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0061.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0061.671] lstrlenW (lpString="Themes") returned 6
	[0061.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0061.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0061.671] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0061.671] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0061.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0061.671] lstrlenW (lpString="TrkWks") returned 6
	[0061.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0061.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0061.671] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0061.671] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0061.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0061.671] lstrlenW (lpString="UxSms") returned 5
	[0061.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0061.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0061.671] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0061.671] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0061.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0061.671] lstrlenW (lpString="VSS") returned 3
	[0061.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0061.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0061.671] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0061.671] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0061.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0061.671] lstrlenW (lpString="WdiServiceHost") returned 14
	[0061.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0061.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0061.671] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0061.671] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0061.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0061.672] lstrlenW (lpString="WdiSystemHost") returned 13
	[0061.672] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0061.672] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0061.672] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0061.672] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0061.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0061.672] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0061.672] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0061.672] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0061.672] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0061.672] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0061.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0061.672] lstrlenW (lpString="Winmgmt") returned 7
	[0061.672] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0061.672] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0061.672] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0061.672] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0061.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0061.672] lstrlenW (lpString="WPDBusEnum") returned 10
	[0061.672] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0061.672] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0061.672] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0061.672] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0061.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0061.672] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x9870050 | out: hHeap=0x5350000) returned 1
	[0061.672] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x23c
	[0061.675] Process32FirstW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0061.676] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0061.677] lstrlenW (lpString="System") returned 6
	[0061.677] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0061.677] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0061.677] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0061.677] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0061.677] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0061.677] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0061.677] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0061.677] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0061.677] lstrlenW (lpString="smss.exe") returned 8
	[0061.677] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0061.678] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0061.678] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0061.678] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0061.678] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0061.678] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0061.678] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0061.678] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0061.678] lstrlenW (lpString="csrss.exe") returned 9
	[0061.678] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0061.678] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0061.678] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0061.679] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0061.679] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0061.679] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0061.679] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0061.679] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0061.679] lstrlenW (lpString="wininit.exe") returned 11
	[0061.679] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0061.679] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0061.679] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0061.680] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0061.685] lstrlenW (lpString="csrss.exe") returned 9
	[0061.685] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0061.686] lstrlenW (lpString="winlogon.exe") returned 12
	[0061.686] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0061.686] lstrlenW (lpString="services.exe") returned 12
	[0061.686] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0061.687] lstrlenW (lpString="lsass.exe") returned 9
	[0061.687] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0061.688] lstrlenW (lpString="lsm.exe") returned 7
	[0061.688] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.689] lstrlenW (lpString="svchost.exe") returned 11
	[0061.689] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.689] lstrlenW (lpString="svchost.exe") returned 11
	[0061.689] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.690] lstrlenW (lpString="svchost.exe") returned 11
	[0061.690] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.691] lstrlenW (lpString="svchost.exe") returned 11
	[0061.691] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.692] lstrlenW (lpString="svchost.exe") returned 11
	[0061.692] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0061.692] lstrlenW (lpString="audiodg.exe") returned 11
	[0061.692] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.693] lstrlenW (lpString="svchost.exe") returned 11
	[0061.693] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.694] lstrlenW (lpString="svchost.exe") returned 11
	[0061.694] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0061.695] lstrlenW (lpString="dwm.exe") returned 7
	[0061.695] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0061.695] lstrlenW (lpString="explorer.exe") returned 12
	[0061.695] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0061.696] lstrlenW (lpString="spoolsv.exe") returned 11
	[0061.696] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0061.697] lstrlenW (lpString="taskhost.exe") returned 12
	[0061.697] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.697] lstrlenW (lpString="svchost.exe") returned 11
	[0061.698] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0061.698] lstrlenW (lpString="taskeng.exe") returned 11
	[0061.699] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0061.699] lstrlenW (lpString="taskhost.exe") returned 12
	[0061.699] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0061.700] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0061.700] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0061.701] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0061.701] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0061.701] lstrlenW (lpString="possibilities.exe") returned 17
	[0061.701] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0061.702] lstrlenW (lpString="wilson.exe") returned 10
	[0061.702] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0061.703] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0061.703] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0061.704] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0061.704] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0061.704] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0061.704] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0061.846] lstrlenW (lpString="crisis.exe") returned 10
	[0061.847] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0062.090] lstrlenW (lpString="dramatically.exe") returned 16
	[0062.093] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0062.105] lstrlenW (lpString="rocket.exe") returned 10
	[0062.107] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0062.120] lstrlenW (lpString="warrant.exe") returned 11
	[0062.124] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0062.141] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0062.145] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0062.154] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0062.158] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0062.167] lstrlenW (lpString="israel.exe") returned 10
	[0062.171] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0062.180] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0062.184] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0062.190] lstrlenW (lpString="toxic chain.exe") returned 15
	[0062.193] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0062.202] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0062.202] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0062.203] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0062.203] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0062.204] lstrlenW (lpString="demo.exe") returned 8
	[0062.204] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0062.212] lstrlenW (lpString="cmd.exe") returned 7
	[0062.217] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0062.237] lstrlenW (lpString="conhost.exe") returned 11
	[0062.247] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0062.258] lstrlenW (lpString="vssadmin.exe") returned 12
	[0062.261] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0062.281] lstrlenW (lpString="VSSVC.exe") returned 9
	[0062.286] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.305] lstrlenW (lpString="svchost.exe") returned 11
	[0062.305] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0062.306] lstrlenW (lpString="LogonUI.exe") returned 11
	[0062.306] Process32NextW (in: hSnapshot=0x23c, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0062.307] CloseHandle (hObject=0x23c) returned 1
	[0062.307] Sleep (dwMilliseconds=0x1f4) 
	[0063.019] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53e76c8
	[0063.020] EnumServicesStatusExW (in: hSCManager=0x53e76c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 0
	[0063.020] GetLastError () returned 0xea
	[0063.020] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x12c6) returned 0x9870050
	[0063.020] EnumServicesStatusExW (in: hSCManager=0x53e76c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x9870050, cbBufSize=0x12c6, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x9870050, pcbBytesNeeded=0x711ff44, lpServicesReturned=0x711ff5c, lpResumeHandle=0x0) returned 1
	[0063.021] CloseServiceHandle (hSCObject=0x53e76c8) returned 1
	[0063.021] lstrlenW (lpString="Appinfo") returned 7
	[0063.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0063.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0063.021] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0063.021] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0063.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0063.021] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0063.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0063.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0063.021] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0063.021] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0063.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0063.021] lstrlenW (lpString="AudioSrv") returned 8
	[0063.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioSrv") returned 1
	[0063.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioSrv") returned 1
	[0063.021] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioSrv") returned 1
	[0063.021] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioSrv") returned 1
	[0063.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioSrv") returned 1
	[0063.021] lstrlenW (lpString="BFE") returned 3
	[0063.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0063.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0063.021] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0063.021] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0063.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0063.022] lstrlenW (lpString="CryptSvc") returned 8
	[0063.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0063.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0063.022] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0063.022] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0063.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0063.022] lstrlenW (lpString="CscService") returned 10
	[0063.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CscService") returned 1
	[0063.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CscService") returned 1
	[0063.022] lstrcmpiW (lpString1="sqlwriter", lpString2="CscService") returned 1
	[0063.022] lstrcmpiW (lpString1="mssqlserver", lpString2="CscService") returned 1
	[0063.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CscService") returned 1
	[0063.022] lstrlenW (lpString="DcomLaunch") returned 10
	[0063.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0063.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0063.022] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0063.022] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0063.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0063.022] lstrlenW (lpString="Dhcp") returned 4
	[0063.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0063.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0063.022] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0063.022] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0063.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0063.022] lstrlenW (lpString="Dnscache") returned 8
	[0063.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0063.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0063.022] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0063.022] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0063.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0063.022] lstrlenW (lpString="DPS") returned 3
	[0063.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0063.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0063.023] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0063.023] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0063.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0063.023] lstrlenW (lpString="eventlog") returned 8
	[0063.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="eventlog") returned 1
	[0063.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="eventlog") returned 1
	[0063.023] lstrcmpiW (lpString1="sqlwriter", lpString2="eventlog") returned 1
	[0063.023] lstrcmpiW (lpString1="mssqlserver", lpString2="eventlog") returned 1
	[0063.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="eventlog") returned 1
	[0063.023] lstrlenW (lpString="EventSystem") returned 11
	[0063.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0063.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0063.023] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0063.023] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0063.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0063.023] lstrlenW (lpString="gpsvc") returned 5
	[0063.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0063.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0063.023] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0063.023] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0063.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0063.023] lstrlenW (lpString="iphlpsvc") returned 8
	[0063.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0063.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0063.023] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0063.023] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0063.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0063.023] lstrlenW (lpString="LanmanServer") returned 12
	[0063.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0063.024] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0063.024] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0063.024] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0063.024] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0063.024] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0063.024] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0063.024] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0063.024] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0063.024] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0063.024] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0063.024] lstrlenW (lpString="lmhosts") returned 7
	[0063.024] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0063.024] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0063.024] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0063.024] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0063.024] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0063.024] lstrlenW (lpString="MMCSS") returned 5
	[0063.024] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MMCSS") returned -1
	[0063.024] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MMCSS") returned -1
	[0063.024] lstrcmpiW (lpString1="sqlwriter", lpString2="MMCSS") returned 1
	[0063.024] lstrcmpiW (lpString1="mssqlserver", lpString2="MMCSS") returned 1
	[0063.024] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MMCSS") returned 1
	[0063.024] lstrlenW (lpString="MpsSvc") returned 6
	[0063.024] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0063.024] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0063.024] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0063.024] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0063.024] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0063.024] lstrlenW (lpString="Netman") returned 6
	[0063.024] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Netman") returned -1
	[0063.024] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Netman") returned -1
	[0063.024] lstrcmpiW (lpString1="sqlwriter", lpString2="Netman") returned 1
	[0063.024] lstrcmpiW (lpString1="mssqlserver", lpString2="Netman") returned -1
	[0063.025] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Netman") returned 1
	[0063.025] lstrlenW (lpString="netprofm") returned 8
	[0063.025] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0063.025] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0063.025] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0063.025] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0063.025] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0063.025] lstrlenW (lpString="NlaSvc") returned 6
	[0063.025] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0063.025] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0063.025] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0063.025] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0063.025] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0063.025] lstrlenW (lpString="nsi") returned 3
	[0063.025] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0063.025] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0063.025] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0063.025] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0063.025] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0063.025] lstrlenW (lpString="PcaSvc") returned 6
	[0063.025] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0063.025] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0063.025] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0063.025] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0063.025] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0063.025] lstrlenW (lpString="PlugPlay") returned 8
	[0063.025] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0063.025] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0063.025] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0063.025] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0063.025] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0063.025] lstrlenW (lpString="Power") returned 5
	[0063.025] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0063.026] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0063.026] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0063.026] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0063.026] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0063.026] lstrlenW (lpString="ProfSvc") returned 7
	[0063.026] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0063.026] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0063.026] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0063.026] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0063.026] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0063.026] lstrlenW (lpString="RpcEptMapper") returned 12
	[0063.026] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0063.026] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0063.026] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0063.026] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0063.026] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0063.026] lstrlenW (lpString="RpcSs") returned 5
	[0063.026] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0063.026] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0063.026] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0063.026] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0063.026] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0063.026] lstrlenW (lpString="SamSs") returned 5
	[0063.026] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0063.026] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0063.026] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0063.026] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0063.026] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0063.026] lstrlenW (lpString="Schedule") returned 8
	[0063.026] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0063.026] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0063.026] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0063.027] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0063.027] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0063.027] lstrlenW (lpString="SENS") returned 4
	[0063.027] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0063.027] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0063.027] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0063.027] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0063.027] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0063.027] lstrlenW (lpString="ShellHWDetection") returned 16
	[0063.027] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0063.027] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0063.027] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0063.027] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0063.027] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0063.027] lstrlenW (lpString="Spooler") returned 7
	[0063.027] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0063.027] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0063.027] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0063.027] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0063.027] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0063.027] lstrlenW (lpString="swprv") returned 5
	[0063.027] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="swprv") returned -1
	[0063.027] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="swprv") returned -1
	[0063.027] lstrcmpiW (lpString1="sqlwriter", lpString2="swprv") returned -1
	[0063.027] lstrcmpiW (lpString1="mssqlserver", lpString2="swprv") returned -1
	[0063.027] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="swprv") returned -1
	[0063.027] lstrlenW (lpString="SysMain") returned 7
	[0063.027] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0063.027] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0063.027] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0063.027] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0063.027] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0063.028] lstrlenW (lpString="Themes") returned 6
	[0063.028] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0063.028] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0063.028] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0063.028] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0063.028] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0063.028] lstrlenW (lpString="TrkWks") returned 6
	[0063.028] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0063.028] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0063.028] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0063.028] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0063.028] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0063.028] lstrlenW (lpString="UxSms") returned 5
	[0063.028] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UxSms") returned -1
	[0063.028] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UxSms") returned -1
	[0063.028] lstrcmpiW (lpString1="sqlwriter", lpString2="UxSms") returned -1
	[0063.028] lstrcmpiW (lpString1="mssqlserver", lpString2="UxSms") returned -1
	[0063.028] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UxSms") returned -1
	[0063.028] lstrlenW (lpString="VSS") returned 3
	[0063.028] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VSS") returned -1
	[0063.028] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VSS") returned -1
	[0063.028] lstrcmpiW (lpString1="sqlwriter", lpString2="VSS") returned -1
	[0063.028] lstrcmpiW (lpString1="mssqlserver", lpString2="VSS") returned -1
	[0063.028] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VSS") returned -1
	[0063.028] lstrlenW (lpString="WdiServiceHost") returned 14
	[0063.028] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0063.028] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0063.028] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0063.028] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0063.028] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0063.028] lstrlenW (lpString="WdiSystemHost") returned 13
	[0063.028] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0063.029] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiSystemHost") returned -1
	[0063.029] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiSystemHost") returned -1
	[0063.029] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiSystemHost") returned -1
	[0063.029] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiSystemHost") returned -1
	[0063.029] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0063.029] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0063.029] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0063.029] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0063.029] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0063.029] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0063.029] lstrlenW (lpString="Winmgmt") returned 7
	[0063.029] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0063.029] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0063.029] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0063.029] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0063.029] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0063.029] lstrlenW (lpString="WPDBusEnum") returned 10
	[0063.029] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0063.029] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WPDBusEnum") returned -1
	[0063.029] lstrcmpiW (lpString1="sqlwriter", lpString2="WPDBusEnum") returned -1
	[0063.029] lstrcmpiW (lpString1="mssqlserver", lpString2="WPDBusEnum") returned -1
	[0063.029] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WPDBusEnum") returned -1
	[0063.029] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x9870050 | out: hHeap=0x5350000) returned 1
	[0063.029] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e8
	[0063.032] Process32FirstW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0063.033] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0063.033] lstrlenW (lpString="System") returned 6
	[0063.033] lstrcmpiW (lpString1="1c8.exe", lpString2="System") returned -1
	[0063.033] lstrcmpiW (lpString1="1cv77.exe", lpString2="System") returned -1
	[0063.033] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0063.033] lstrcmpiW (lpString1="postgres.exe", lpString2="System") returned -1
	[0063.033] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0063.033] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0063.033] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0063.033] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0063.034] lstrlenW (lpString="smss.exe") returned 8
	[0063.034] lstrcmpiW (lpString1="1c8.exe", lpString2="smss.exe") returned -1
	[0063.034] lstrcmpiW (lpString1="1cv77.exe", lpString2="smss.exe") returned -1
	[0063.034] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0063.034] lstrcmpiW (lpString1="postgres.exe", lpString2="smss.exe") returned -1
	[0063.034] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0063.034] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0063.034] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0063.034] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0063.035] lstrlenW (lpString="csrss.exe") returned 9
	[0063.035] lstrcmpiW (lpString1="1c8.exe", lpString2="csrss.exe") returned -1
	[0063.035] lstrcmpiW (lpString1="1cv77.exe", lpString2="csrss.exe") returned -1
	[0063.035] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0063.035] lstrcmpiW (lpString1="postgres.exe", lpString2="csrss.exe") returned 1
	[0063.035] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0063.035] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0063.035] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0063.035] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0063.036] lstrlenW (lpString="wininit.exe") returned 11
	[0063.036] lstrcmpiW (lpString1="1c8.exe", lpString2="wininit.exe") returned -1
	[0063.036] lstrcmpiW (lpString1="1cv77.exe", lpString2="wininit.exe") returned -1
	[0063.036] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0063.036] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0063.037] lstrlenW (lpString="csrss.exe") returned 9
	[0063.037] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0063.038] lstrlenW (lpString="winlogon.exe") returned 12
	[0063.038] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0063.038] lstrlenW (lpString="services.exe") returned 12
	[0063.038] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0063.039] lstrlenW (lpString="lsass.exe") returned 9
	[0063.039] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0063.040] lstrlenW (lpString="lsm.exe") returned 7
	[0063.040] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.041] lstrlenW (lpString="svchost.exe") returned 11
	[0063.041] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.041] lstrlenW (lpString="svchost.exe") returned 11
	[0063.041] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.042] lstrlenW (lpString="svchost.exe") returned 11
	[0063.042] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.043] lstrlenW (lpString="svchost.exe") returned 11
	[0063.043] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.044] lstrlenW (lpString="svchost.exe") returned 11
	[0063.044] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0063.044] lstrlenW (lpString="audiodg.exe") returned 11
	[0063.044] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.045] lstrlenW (lpString="svchost.exe") returned 11
	[0063.045] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.046] lstrlenW (lpString="svchost.exe") returned 11
	[0063.046] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0063.046] lstrlenW (lpString="dwm.exe") returned 7
	[0063.047] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0063.047] lstrlenW (lpString="explorer.exe") returned 12
	[0063.048] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0063.048] lstrlenW (lpString="spoolsv.exe") returned 11
	[0063.048] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0063.049] lstrlenW (lpString="taskhost.exe") returned 12
	[0063.049] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.050] lstrlenW (lpString="svchost.exe") returned 11
	[0063.050] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0063.051] lstrlenW (lpString="taskeng.exe") returned 11
	[0063.051] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0063.051] lstrlenW (lpString="taskhost.exe") returned 12
	[0063.051] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="autumn_delete.exe")) returned 1
	[0063.052] lstrlenW (lpString="autumn_delete.exe") returned 17
	[0063.052] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="symptomsterrorbarn.exe")) returned 1
	[0063.053] lstrlenW (lpString="symptomsterrorbarn.exe") returned 22
	[0063.053] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="possibilities.exe")) returned 1
	[0063.054] lstrlenW (lpString="possibilities.exe") returned 17
	[0063.054] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="wilson.exe")) returned 1
	[0063.054] lstrlenW (lpString="wilson.exe") returned 10
	[0063.054] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x594, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="yugoslavia.exe")) returned 1
	[0063.055] lstrlenW (lpString="yugoslavia.exe") returned 14
	[0063.055] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="games_judges_imperial.exe")) returned 1
	[0063.056] lstrlenW (lpString="games_judges_imperial.exe") returned 25
	[0063.056] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="adapter_gambling_shortcuts.exe")) returned 1
	[0063.056] lstrlenW (lpString="adapter_gambling_shortcuts.exe") returned 30
	[0063.057] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="crisis.exe")) returned 1
	[0063.161] lstrlenW (lpString="crisis.exe") returned 10
	[0063.161] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dramatically.exe")) returned 1
	[0063.162] lstrlenW (lpString="dramatically.exe") returned 16
	[0063.162] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rocket.exe")) returned 1
	[0063.163] lstrlenW (lpString="rocket.exe") returned 10
	[0063.163] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="warrant.exe")) returned 1
	[0063.164] lstrlenW (lpString="warrant.exe") returned 11
	[0063.164] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="zimbabwe.exe")) returned 1
	[0063.164] lstrlenW (lpString="zimbabwe.exe") returned 12
	[0063.164] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiences_groups.exe")) returned 1
	[0063.165] lstrlenW (lpString="experiences_groups.exe") returned 22
	[0063.165] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="israel.exe")) returned 1
	[0063.166] lstrlenW (lpString="israel.exe") returned 10
	[0063.166] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="er_ghana_recent.exe")) returned 1
	[0063.166] lstrlenW (lpString="er_ghana_recent.exe") returned 19
	[0063.166] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toxic chain.exe")) returned 1
	[0063.167] lstrlenW (lpString="toxic chain.exe") returned 15
	[0063.167] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="reaches_altered_x.exe")) returned 1
	[0063.168] lstrlenW (lpString="reaches_altered_x.exe") returned 21
	[0063.168] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0063.169] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0063.169] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="demo.exe")) returned 1
	[0063.169] lstrlenW (lpString="demo.exe") returned 8
	[0063.169] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9f0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0063.170] lstrlenW (lpString="cmd.exe") returned 7
	[0063.170] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x188, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0063.171] lstrlenW (lpString="conhost.exe") returned 11
	[0063.171] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa04, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0063.172] lstrlenW (lpString="vssadmin.exe") returned 12
	[0063.172] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1
	[0063.173] lstrlenW (lpString="VSSVC.exe") returned 9
	[0063.173] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.173] lstrlenW (lpString="svchost.exe") returned 11
	[0063.173] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0063.174] lstrlenW (lpString="LogonUI.exe") returned 11
	[0063.174] Process32NextW (in: hSnapshot=0x1e8, lppe=0x711fd34 | out: lppe=0x711fd34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0063.175] CloseHandle (hObject=0x1e8) returned 1
	[0063.175] Sleep (dwMilliseconds=0x1f4) 

Thread:
	id = 5
	os_tid = 0xa10

	[0033.874] WaitForSingleObject (hHandle=0x18fd44, dwMilliseconds=0xffffffff) returned 0xffffffff
	[0033.874] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53a47e0 | out: hHeap=0x5350000) returned 1

Thread:
	id = 6
	os_tid = 0xa14

	[0033.874] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53a47e0
	[0033.874] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53a47e0, Size=0x20) returned 0x53c5e40
	[0033.874] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53c5e40, Size=0x40) returned 0x53a2708
	[0033.874] GetLogicalDrives () returned 0x4
	[0033.874] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x53fe450
	[0033.875] GetComputerNameW (in: lpBuffer=0x53fe454, nSize=0x731ff6c | out: lpBuffer="XDUWTFONO", nSize=0x731ff6c) returned 1
	[0033.876] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x1000) returned 0x53da008
	[0033.876] WNetOpenEnumW (in: dwScope=0x3, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x731ff3c | out: lphEnum=0x731ff3c*=0x53c5008) returned 0x0
	[0033.876] WNetEnumResourceW (in: hEnum=0x53c5008, lpcCount=0x731ff38, lpBuffer=0x53da008, lpBufferSize=0x731ff40 | out: lpcCount=0x731ff38, lpBuffer=0x53da008, lpBufferSize=0x731ff40) returned 0x103
	[0033.876] WNetCloseEnum (hEnum=0x53c5008) returned 0x0
	[0033.876] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x731ff3c | out: lphEnum=0x731ff3c*=0x53e88c0) returned 0x0
	[0035.862] WNetEnumResourceW (in: hEnum=0x53e88c0, lpcCount=0x731ff38, lpBuffer=0x53da008, lpBufferSize=0x731ff40 | out: lpcCount=0x731ff38, lpBuffer=0x53da008, lpBufferSize=0x731ff40) returned 0x0
	[0035.862] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x1000) returned 0x8ca0070
	[0035.862] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x53da008, lphEnum=0x731ff10 | out: lphEnum=0x731ff10*=0x53c5348) returned 0x0
	[0035.875] WNetEnumResourceW (in: hEnum=0x53c5348, lpcCount=0x731ff0c, lpBuffer=0x8ca0070, lpBufferSize=0x731ff14 | out: lpcCount=0x731ff0c, lpBuffer=0x8ca0070, lpBufferSize=0x731ff14) returned 0x103
	[0035.875] WNetCloseEnum (hEnum=0x53c5348) returned 0x0
	[0035.875] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x1000) returned 0x8cb40d0
	[0035.875] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x53da028, lphEnum=0x731ff10 | out: lphEnum=0x731ff10*=0x0) returned 0x4b8
	[0056.685] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x1000) returned 0x8d06160
	[0056.686] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x53da048, lphEnum=0x731ff10 | out: lphEnum=0x731ff10*=0x0) returned 0x4c6
	[0056.691] WNetEnumResourceW (in: hEnum=0x53e88c0, lpcCount=0x731ff38, lpBuffer=0x53da008, lpBufferSize=0x731ff40 | out: lpcCount=0x731ff38, lpBuffer=0x53da008, lpBufferSize=0x731ff40) returned 0x103
	[0056.691] WNetCloseEnum (hEnum=0x53e88c0) returned 0x0
	[0056.691] GetLogicalDrives () returned 0x4
	[0056.691] Sleep (dwMilliseconds=0x64) 
	[0057.232] GetLogicalDrives () returned 0x4
	[0057.232] Sleep (dwMilliseconds=0x64) 
	[0057.477] GetLogicalDrives () returned 0x4
	[0057.477] Sleep (dwMilliseconds=0x64) 
	[0057.741] GetLogicalDrives () returned 0x4
	[0057.741] Sleep (dwMilliseconds=0x64) 
	[0058.651] GetLogicalDrives () returned 0x4
	[0058.652] Sleep (dwMilliseconds=0x64) 
	[0058.922] GetLogicalDrives () returned 0x4
	[0058.922] Sleep (dwMilliseconds=0x64) 
	[0059.256] GetLogicalDrives () returned 0x4
	[0059.256] Sleep (dwMilliseconds=0x64) 
	[0059.416] GetLogicalDrives () returned 0x4
	[0059.416] Sleep (dwMilliseconds=0x64) 
	[0059.555] GetLogicalDrives () returned 0x4
	[0059.555] Sleep (dwMilliseconds=0x64) 
	[0060.583] GetLogicalDrives () returned 0x4
	[0060.583] Sleep (dwMilliseconds=0x64) 
	[0061.056] GetLogicalDrives () returned 0x4
	[0061.057] Sleep (dwMilliseconds=0x64) 
	[0061.408] GetLogicalDrives () returned 0x4
	[0061.408] Sleep (dwMilliseconds=0x64) 
	[0061.662] GetLogicalDrives () returned 0x4
	[0061.662] Sleep (dwMilliseconds=0x64) 
	[0061.860] GetLogicalDrives () returned 0x4
	[0062.066] Sleep (dwMilliseconds=0x64) 
	[0062.681] GetLogicalDrives () returned 0x4
	[0062.681] Sleep (dwMilliseconds=0x64) 
	[0062.978] GetLogicalDrives () returned 0x4
	[0062.979] Sleep (dwMilliseconds=0x64) 
	[0063.175] GetLogicalDrives () returned 0x4
	[0063.175] Sleep (dwMilliseconds=0x64) 
	[0063.501] GetLogicalDrives () returned 0x4
	[0063.501] Sleep (dwMilliseconds=0x64) 
	[0063.691] GetLogicalDrives () returned 0x4
	[0063.691] Sleep (dwMilliseconds=0x64) 

Thread:
	id = 7
	os_tid = 0xa18

	[0034.537] GetTickCount () returned 0x18f53
	[0034.537] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x24) returned 0x53dd6a0
	[0034.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53dd6a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114
	[0034.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53dd6a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c
	[0034.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53dd6a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130
	[0034.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53dd6a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134
	[0034.540] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e08c0
	[0034.540] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e08c0, Size=0x20) returned 0x53c6160
	[0034.540] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e08c0
	[0034.540] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e08c0, Size=0x20) returned 0x53c6188
	[0034.540] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0034.540] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0034.540] Wow64DisableWow64FsRedirection (in: OldValue=0x721ff84 | out: OldValue=0x721ff84*=0x0) returned 1
	[0034.540] lstrlenW (lpString="kernel32.dll") returned 12
	[0034.540] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6160 | out: hHeap=0x5350000) returned 1
	[0034.540] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0034.540] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6188 | out: hHeap=0x5350000) returned 1
	[0034.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x53c9fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138
	[0034.541] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0034.871] GetTickCount () returned 0x18fdf
	[0034.871] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0035.176] GetTickCount () returned 0x1906c
	[0035.176] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0035.815] GetTickCount () returned 0x190e9
	[0035.815] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0036.113] GetTickCount () returned 0x191d3
	[0036.113] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0036.451] GetTickCount () returned 0x1932a
	[0036.451] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0036.837] GetTickCount () returned 0x194a0
	[0036.837] GetTickCount () returned 0x194a0
	[0036.837] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0037.329] GetTickCount () returned 0x19693
	[0037.329] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0037.772] GetTickCount () returned 0x1980a
	[0037.772] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0038.197] GetTickCount () returned 0x199bf
	[0038.197] GetTickCount () returned 0x199bf
	[0038.197] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0038.565] GetTickCount () returned 0x19b25
	[0038.565] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0038.845] GetTickCount () returned 0x19c3e
	[0038.845] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0039.160] GetTickCount () returned 0x19d76
	[0039.160] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0039.580] GetTickCount () returned 0x19edd
	[0039.580] GetTickCount () returned 0x19edd
	[0039.580] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0039.819] GetTickCount () returned 0x19fd7
	[0039.819] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0040.106] GetTickCount () returned 0x1a0d0
	[0040.106] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0040.646] GetTickCount () returned 0x1a2c3
	[0040.646] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0041.180] GetTickCount () returned 0x1a4b7
	[0041.180] GetTickCount () returned 0x1a4b7
	[0041.180] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0041.684] GetTickCount () returned 0x1a62d
	[0041.684] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0041.976] GetTickCount () returned 0x1a736
	[0041.976] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0042.104] GetTickCount () returned 0x1a7b3
	[0042.104] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0042.555] GetTickCount () returned 0x1a8db
	[0042.555] GetTickCount () returned 0x1a8db
	[0042.555] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0042.861] GetTickCount () returned 0x1a9e5
	[0042.861] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0043.092] GetTickCount () returned 0x1aabf
	[0043.092] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0043.325] GetTickCount () returned 0x1ab8a
	[0043.325] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0043.431] GetTickCount () returned 0x1abf7
	[0043.431] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0043.661] GetTickCount () returned 0x1ace1
	[0043.661] GetTickCount () returned 0x1ace1
	[0043.661] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0043.925] GetTickCount () returned 0x1adea
	[0043.925] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0044.516] GetTickCount () returned 0x1b03b
	[0044.516] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0045.577] GetTickCount () returned 0x1b460
	[0045.577] GetTickCount () returned 0x1b460
	[0045.578] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0045.970] GetTickCount () returned 0x1b5c7
	[0045.970] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0046.189] GetTickCount () returned 0x1b6a1
	[0046.189] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0046.621] GetTickCount () returned 0x1b856
	[0046.621] GetTickCount () returned 0x1b856
	[0046.621] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0046.979] GetTickCount () returned 0x1b98e
	[0046.979] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0047.431] GetTickCount () returned 0x1bb43
	[0047.432] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0047.686] GetTickCount () returned 0x1bc3c
	[0047.686] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0048.061] GetTickCount () returned 0x1bdb3
	[0048.061] GetTickCount () returned 0x1bdb3
	[0048.061] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0048.222] GetTickCount () returned 0x1be4f
	[0048.222] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0048.371] GetTickCount () returned 0x1beeb
	[0048.371] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0049.277] GetTickCount () returned 0x1c273
	[0049.277] GetTickCount () returned 0x1c273
	[0049.277] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0049.468] GetTickCount () returned 0x1c32f
	[0049.468] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0049.569] GetTickCount () returned 0x1c39c
	[0049.569] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0049.678] GetTickCount () returned 0x1c409
	[0049.678] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0049.798] GetTickCount () returned 0x1c476
	[0049.798] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0049.916] GetTickCount () returned 0x1c4f3
	[0049.916] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0050.037] GetTickCount () returned 0x1c570
	[0050.037] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0050.146] GetTickCount () returned 0x1c5dd
	[0050.146] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0050.484] GetTickCount () returned 0x1c734
	[0050.490] GetTickCount () returned 0x1c734
	[0050.490] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0050.877] GetTickCount () returned 0x1c8ab
	[0050.877] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0051.227] GetTickCount () returned 0x1ca11
	[0051.227] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0051.576] GetTickCount () returned 0x1cb69
	[0051.576] GetTickCount () returned 0x1cb69
	[0051.576] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0051.707] GetTickCount () returned 0x1cbf5
	[0051.707] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0052.067] GetTickCount () returned 0x1cd5c
	[0052.067] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0052.598] GetTickCount () returned 0x1cf6e
	[0052.598] GetTickCount () returned 0x1cf6e
	[0052.598] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0052.845] GetTickCount () returned 0x1d068
	[0052.845] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0053.146] GetTickCount () returned 0x1d190
	[0053.146] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0053.399] GetTickCount () returned 0x1d28a
	[0053.399] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0053.708] GetTickCount () returned 0x1d3c2
	[0053.709] GetTickCount () returned 0x1d3c2
	[0053.709] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0053.876] GetTickCount () returned 0x1d46d
	[0053.876] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0054.013] GetTickCount () returned 0x1d4ea
	[0054.013] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0054.918] GetTickCount () returned 0x1d873
	[0054.918] GetTickCount () returned 0x1d873
	[0054.918] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0055.350] GetTickCount () returned 0x1da28
	[0055.350] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0055.719] GetTickCount () returned 0x1db9e
	[0055.719] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0056.049] GetTickCount () returned 0x1dce6
	[0056.049] GetTickCount () returned 0x1dce6
	[0056.049] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0057.076] GetTickCount () returned 0x1e0eb
	[0057.076] GetTickCount () returned 0x1e0eb
	[0057.076] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0057.360] GetTickCount () returned 0x1e204
	[0057.360] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0057.491] GetTickCount () returned 0x1e281
	[0057.491] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0057.786] GetTickCount () returned 0x1e3a9
	[0057.786] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0058.653] GetTickCount () returned 0x1e713
	[0058.653] GetTickCount () returned 0x1e713
	[0058.653] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0058.922] GetTickCount () returned 0x1e81c
	[0058.922] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0059.219] GetTickCount () returned 0x1e945
	[0059.219] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0059.409] GetTickCount () returned 0x1ea00
	[0059.412] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0059.555] GetTickCount () returned 0x1ea9c
	[0059.555] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0060.570] GetTickCount () returned 0x1ee92
	[0060.570] GetTickCount () returned 0x1ee92
	[0060.570] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0061.019] GetTickCount () returned 0x1f047
	[0061.019] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0061.305] GetTickCount () returned 0x1f16f
	[0061.305] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0061.662] GetTickCount () returned 0x1f2d6
	[0061.662] GetTickCount () returned 0x1f2d6
	[0061.662] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0062.070] GetTickCount () returned 0x1f46c
	[0062.075] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0062.681] GetTickCount () returned 0x1f6cc
	[0062.682] GetTickCount () returned 0x1f6cc
	[0062.682] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0062.979] GetTickCount () returned 0x1f7f4
	[0062.979] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0063.175] GetTickCount () returned 0x1f8bf
	[0063.175] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0063.502] GetTickCount () returned 0x1fa07
	[0063.502] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) returned 0x102
	[0063.691] GetTickCount () returned 0x1fac2
	[0063.691] GetTickCount () returned 0x1fac2
	[0063.691] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x64) 

Thread:
	id = 9
	os_tid = 0xa34

	[0034.799] GetTickCount () returned 0x18fa1
	[0034.799] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x24) returned 0x53ddb58
	[0034.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53ddb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144
	[0034.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53ddb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148
	[0034.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53ddb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c
	[0034.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x53ddb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150
	[0034.810] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e09b0
	[0034.810] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e09b0, Size=0x20) returned 0x53c6200
	[0034.810] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e09b0
	[0034.810] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e09b0, Size=0x20) returned 0x53c6228
	[0034.810] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0034.810] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0034.810] Wow64DisableWow64FsRedirection (in: OldValue=0x781ff84 | out: OldValue=0x781ff84*=0x0) returned 1
	[0034.810] lstrlenW (lpString="kernel32.dll") returned 12
	[0034.810] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6200 | out: hHeap=0x5350000) returned 1
	[0034.810] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0034.810] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6228 | out: hHeap=0x5350000) returned 1
	[0034.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x540e5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154
	[0034.830] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0035.156] GetTickCount () returned 0x1905c
	[0035.156] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0035.808] GetTickCount () returned 0x190d9
	[0035.808] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0036.113] GetTickCount () returned 0x191d3
	[0036.113] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0036.451] GetTickCount () returned 0x1932a
	[0036.451] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0036.836] GetTickCount () returned 0x194a0
	[0036.836] GetTickCount () returned 0x194a0
	[0036.836] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0037.329] GetTickCount () returned 0x19693
	[0037.329] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0037.772] GetTickCount () returned 0x1980a
	[0037.772] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0038.198] GetTickCount () returned 0x199bf
	[0038.198] GetTickCount () returned 0x199bf
	[0038.198] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0038.566] GetTickCount () returned 0x19b25
	[0038.566] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0038.846] GetTickCount () returned 0x19c3e
	[0038.846] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0039.160] GetTickCount () returned 0x19d76
	[0039.160] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0039.580] GetTickCount () returned 0x19edd
	[0039.580] GetTickCount () returned 0x19edd
	[0039.580] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0039.819] GetTickCount () returned 0x19fd7
	[0039.819] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0040.106] GetTickCount () returned 0x1a0d0
	[0040.106] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0040.646] GetTickCount () returned 0x1a2c3
	[0040.646] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0041.181] GetTickCount () returned 0x1a4b7
	[0041.181] GetTickCount () returned 0x1a4b7
	[0041.181] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0041.684] GetTickCount () returned 0x1a62d
	[0041.684] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0041.976] GetTickCount () returned 0x1a736
	[0041.976] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0042.104] GetTickCount () returned 0x1a7b3
	[0042.104] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0042.555] GetTickCount () returned 0x1a8db
	[0042.555] GetTickCount () returned 0x1a8db
	[0042.555] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0042.861] GetTickCount () returned 0x1a9e5
	[0042.861] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0043.092] GetTickCount () returned 0x1aabf
	[0043.092] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0043.325] GetTickCount () returned 0x1ab8a
	[0043.325] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0043.427] GetTickCount () returned 0x1abf7
	[0043.427] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0043.661] GetTickCount () returned 0x1ace1
	[0043.661] GetTickCount () returned 0x1ace1
	[0043.661] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0043.925] GetTickCount () returned 0x1adea
	[0043.925] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0044.516] GetTickCount () returned 0x1b03b
	[0044.516] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0045.578] GetTickCount () returned 0x1b460
	[0045.578] GetTickCount () returned 0x1b460
	[0045.578] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0045.970] GetTickCount () returned 0x1b5c7
	[0045.970] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0046.189] GetTickCount () returned 0x1b6a1
	[0046.189] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0046.621] GetTickCount () returned 0x1b856
	[0046.621] GetTickCount () returned 0x1b856
	[0046.621] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0046.979] GetTickCount () returned 0x1b98e
	[0046.979] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0047.432] GetTickCount () returned 0x1bb43
	[0047.432] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0047.686] GetTickCount () returned 0x1bc3c
	[0047.686] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0048.061] GetTickCount () returned 0x1bdb3
	[0048.061] GetTickCount () returned 0x1bdb3
	[0048.061] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0048.222] GetTickCount () returned 0x1be4f
	[0048.222] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0048.371] GetTickCount () returned 0x1beeb
	[0048.371] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0049.277] GetTickCount () returned 0x1c273
	[0049.277] GetTickCount () returned 0x1c273
	[0049.277] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0049.468] GetTickCount () returned 0x1c32f
	[0049.468] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0049.569] GetTickCount () returned 0x1c39c
	[0049.569] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0049.678] GetTickCount () returned 0x1c409
	[0049.678] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0049.791] GetTickCount () returned 0x1c476
	[0049.794] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0049.916] GetTickCount () returned 0x1c4f3
	[0049.916] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0050.037] GetTickCount () returned 0x1c570
	[0050.037] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0050.146] GetTickCount () returned 0x1c5dd
	[0050.146] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0050.490] GetTickCount () returned 0x1c734
	[0050.490] GetTickCount () returned 0x1c734
	[0050.490] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0050.877] GetTickCount () returned 0x1c8ab
	[0050.877] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0051.227] GetTickCount () returned 0x1ca11
	[0051.227] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0051.576] GetTickCount () returned 0x1cb69
	[0051.576] GetTickCount () returned 0x1cb69
	[0051.576] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0051.707] GetTickCount () returned 0x1cbf5
	[0051.707] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0052.067] GetTickCount () returned 0x1cd5c
	[0052.067] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0052.597] GetTickCount () returned 0x1cf6e
	[0052.597] GetTickCount () returned 0x1cf6e
	[0052.597] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0052.844] GetTickCount () returned 0x1d058
	[0052.844] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0053.145] GetTickCount () returned 0x1d190
	[0053.145] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0053.399] GetTickCount () returned 0x1d28a
	[0053.399] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0053.709] GetTickCount () returned 0x1d3c2
	[0053.709] GetTickCount () returned 0x1d3c2
	[0053.709] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0053.876] GetTickCount () returned 0x1d46d
	[0053.876] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0054.013] GetTickCount () returned 0x1d4ea
	[0054.013] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0054.918] GetTickCount () returned 0x1d873
	[0054.918] GetTickCount () returned 0x1d873
	[0054.918] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0055.350] GetTickCount () returned 0x1da28
	[0055.350] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0055.719] GetTickCount () returned 0x1db9e
	[0055.719] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0056.048] GetTickCount () returned 0x1dce6
	[0056.048] GetTickCount () returned 0x1dce6
	[0056.048] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0057.076] GetTickCount () returned 0x1e0eb
	[0057.076] GetTickCount () returned 0x1e0eb
	[0057.076] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0057.360] GetTickCount () returned 0x1e204
	[0057.360] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0057.491] GetTickCount () returned 0x1e281
	[0057.491] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0057.786] GetTickCount () returned 0x1e3a9
	[0057.786] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0058.653] GetTickCount () returned 0x1e713
	[0058.653] GetTickCount () returned 0x1e713
	[0058.653] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0058.922] GetTickCount () returned 0x1e81c
	[0058.922] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0059.219] GetTickCount () returned 0x1e945
	[0059.219] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0059.412] GetTickCount () returned 0x1ea10
	[0059.412] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0059.555] GetTickCount () returned 0x1ea9c
	[0059.555] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0060.570] GetTickCount () returned 0x1ee92
	[0060.570] GetTickCount () returned 0x1ee92
	[0060.570] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0061.020] GetTickCount () returned 0x1f056
	[0061.020] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0061.305] GetTickCount () returned 0x1f16f
	[0061.305] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0061.662] GetTickCount () returned 0x1f2d6
	[0061.662] GetTickCount () returned 0x1f2d6
	[0061.662] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0062.068] GetTickCount () returned 0x1f46c
	[0062.069] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0062.681] GetTickCount () returned 0x1f6cc
	[0062.681] GetTickCount () returned 0x1f6cc
	[0062.681] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0062.979] GetTickCount () returned 0x1f7f4
	[0062.979] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0063.175] GetTickCount () returned 0x1f8bf
	[0063.175] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0063.502] GetTickCount () returned 0x1fa07
	[0063.502] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) returned 0x102
	[0063.691] GetTickCount () returned 0x1fac2
	[0063.691] GetTickCount () returned 0x1fac2
	[0063.691] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x64) 

Thread:
	id = 10
	os_tid = 0xa38

	[0034.800] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x53ee448
	[0034.800] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x541e9e8
	[0034.801] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0938
	[0034.801] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x6) returned 0x53c8f18
	[0034.801] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e08f0
	[0034.801] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x100000) returned 0x7ee0020
	[0034.801] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0908
	[0034.801] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0908, Size=0x20) returned 0x53c6200
	[0034.801] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0908
	[0034.801] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0908, Size=0x20) returned 0x53c6228
	[0034.801] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0034.801] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0034.801] Wow64DisableWow64FsRedirection (in: OldValue=0x791ff58 | out: OldValue=0x791ff58*=0x0) returned 1
	[0034.801] lstrlenW (lpString="kernel32.dll") returned 12
	[0034.801] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6200 | out: hHeap=0x5350000) returned 1
	[0034.801] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0034.801] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6228 | out: hHeap=0x5350000) returned 1
	[0034.802] Sleep (dwMilliseconds=0x64) 
	[0035.156] Sleep (dwMilliseconds=0x64) 
	[0035.808] Sleep (dwMilliseconds=0x64) 
	[0036.089] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.089] lstrlenW (lpString="PowerPointMUI.xml") returned 17
	[0036.089] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.091] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1450) returned 1
	[0036.091] CloseHandle (hObject=0x194) returned 1
	[0036.091] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 0x2020
	[0036.091] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.091] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.091] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.091] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.091] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0036.092] GetLastError () returned 0x0
	[0036.092] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x5aa, lpOverlapped=0x0) returned 1
	[0036.105] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x5b0, lpOverlapped=0x0) returned 1
	[0036.106] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.106] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xf6, lpOverlapped=0x0) returned 1
	[0036.107] SetEndOfFile (hFile=0x198) returned 1
	[0036.107] CloseHandle (hObject=0x198) returned 1
	[0036.108] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.108] SetEndOfFile (hFile=0x194) returned 1
	[0036.108] CloseHandle (hObject=0x194) returned 1
	[0036.109] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.109] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 1
	[0036.109] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0036.109] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0036.109] lstrlenW (lpString=".doc") returned 4
	[0036.109] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.109] lstrlenW (lpString=".docx") returned 5
	[0036.109] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.109] lstrlenW (lpString=".pdf") returned 4
	[0036.109] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.109] lstrlenW (lpString=".xls") returned 4
	[0036.109] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.109] lstrlenW (lpString=".xlsx") returned 5
	[0036.109] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.109] lstrlenW (lpString=".ppt") returned 4
	[0036.109] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.109] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0036.109] lstrlenW (lpString=".zip") returned 4
	[0036.110] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.110] lstrlenW (lpString=".rar") returned 4
	[0036.110] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.110] lstrlenW (lpString=".bz2") returned 4
	[0036.110] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.110] lstrlenW (lpString=".7z") returned 3
	[0036.110] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.110] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0036.110] lstrlenW (lpString=".dbf") returned 4
	[0036.110] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.110] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0036.110] lstrlenW (lpString=".1cd") returned 4
	[0036.110] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.110] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0036.110] lstrlenW (lpString=".jpg") returned 4
	[0036.110] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.110] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0036.110] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0036.110] lstrlenW (lpString=".doc") returned 4
	[0036.110] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.110] lstrlenW (lpString=".docx") returned 5
	[0036.110] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.110] lstrlenW (lpString=".pdf") returned 4
	[0036.110] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.110] lstrlenW (lpString=".xls") returned 4
	[0036.110] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.110] lstrlenW (lpString=".xlsx") returned 5
	[0036.110] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.110] lstrlenW (lpString=".ppt") returned 4
	[0036.110] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.110] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0036.110] lstrlenW (lpString=".zip") returned 4
	[0036.111] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.111] lstrlenW (lpString=".rar") returned 4
	[0036.111] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.111] lstrlenW (lpString=".bz2") returned 4
	[0036.111] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.111] lstrlenW (lpString=".7z") returned 3
	[0036.111] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.111] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0036.111] lstrlenW (lpString=".dbf") returned 4
	[0036.111] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.111] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0036.111] lstrlenW (lpString=".1cd") returned 4
	[0036.111] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.111] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 80
	[0036.111] lstrlenW (lpString=".jpg") returned 4
	[0036.111] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.111] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.111] lstrlenW (lpString="Setup.xml") returned 9
	[0036.111] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.111] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1886) returned 1
	[0036.112] CloseHandle (hObject=0x194) returned 1
	[0036.112] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.112] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.112] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.112] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.112] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.112] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0036.112] GetLastError () returned 0x0
	[0036.112] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x75e, lpOverlapped=0x0) returned 1
	[0036.114] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x760, lpOverlapped=0x0) returned 1
	[0036.115] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.115] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.115] SetEndOfFile (hFile=0x198) returned 1
	[0036.115] CloseHandle (hObject=0x198) returned 1
	[0036.116] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.116] SetEndOfFile (hFile=0x194) returned 1
	[0036.117] CloseHandle (hObject=0x194) returned 1
	[0036.117] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.117] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.117] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.117] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.117] lstrlenW (lpString=".doc") returned 4
	[0036.117] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.117] lstrlenW (lpString=".docx") returned 5
	[0036.117] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.117] lstrlenW (lpString=".pdf") returned 4
	[0036.117] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.117] lstrlenW (lpString=".xls") returned 4
	[0036.117] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.117] lstrlenW (lpString=".xlsx") returned 5
	[0036.117] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.117] lstrlenW (lpString=".ppt") returned 4
	[0036.117] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.118] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.118] lstrlenW (lpString=".zip") returned 4
	[0036.118] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.118] lstrlenW (lpString=".rar") returned 4
	[0036.118] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.118] lstrlenW (lpString=".bz2") returned 4
	[0036.118] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.118] lstrlenW (lpString=".7z") returned 3
	[0036.118] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.118] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.118] lstrlenW (lpString=".dbf") returned 4
	[0036.118] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.118] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.118] lstrlenW (lpString=".1cd") returned 4
	[0036.118] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.118] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.118] lstrlenW (lpString=".jpg") returned 4
	[0036.118] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.118] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.118] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.118] lstrlenW (lpString=".doc") returned 4
	[0036.118] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.118] lstrlenW (lpString=".docx") returned 5
	[0036.118] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.118] lstrlenW (lpString=".pdf") returned 4
	[0036.118] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.118] lstrlenW (lpString=".xls") returned 4
	[0036.118] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.118] lstrlenW (lpString=".xlsx") returned 5
	[0036.118] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.118] lstrlenW (lpString=".ppt") returned 4
	[0036.118] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.119] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.119] lstrlenW (lpString=".zip") returned 4
	[0036.119] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.119] lstrlenW (lpString=".rar") returned 4
	[0036.119] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.119] lstrlenW (lpString=".bz2") returned 4
	[0036.119] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.119] lstrlenW (lpString=".7z") returned 3
	[0036.119] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.119] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.119] lstrlenW (lpString=".dbf") returned 4
	[0036.119] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.119] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.119] lstrlenW (lpString=".1cd") returned 4
	[0036.119] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.119] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.119] lstrlenW (lpString=".jpg") returned 4
	[0036.119] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.119] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.119] lstrlenW (lpString="PublisherMUI.xml") returned 16
	[0036.119] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.121] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1450) returned 1
	[0036.121] CloseHandle (hObject=0x194) returned 1
	[0036.121] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 0x2020
	[0036.121] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.121] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.121] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.121] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.121] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0036.122] GetLastError () returned 0x0
	[0036.122] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x5aa, lpOverlapped=0x0) returned 1
	[0036.293] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x5b0, lpOverlapped=0x0) returned 1
	[0036.302] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.302] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xf4, lpOverlapped=0x0) returned 1
	[0036.302] SetEndOfFile (hFile=0x198) returned 1
	[0036.302] CloseHandle (hObject=0x198) returned 1
	[0036.303] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.303] SetEndOfFile (hFile=0x194) returned 1
	[0036.303] CloseHandle (hObject=0x194) returned 1
	[0036.303] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.304] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 1
	[0036.304] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0036.304] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0036.304] lstrlenW (lpString=".doc") returned 4
	[0036.304] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.304] lstrlenW (lpString=".docx") returned 5
	[0036.304] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.304] lstrlenW (lpString=".pdf") returned 4
	[0036.304] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.304] lstrlenW (lpString=".xls") returned 4
	[0036.304] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.304] lstrlenW (lpString=".xlsx") returned 5
	[0036.304] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.304] lstrlenW (lpString=".ppt") returned 4
	[0036.304] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.304] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0036.304] lstrlenW (lpString=".zip") returned 4
	[0036.304] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.304] lstrlenW (lpString=".rar") returned 4
	[0036.304] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.304] lstrlenW (lpString=".bz2") returned 4
	[0036.304] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.305] lstrlenW (lpString=".7z") returned 3
	[0036.305] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.305] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0036.305] lstrlenW (lpString=".dbf") returned 4
	[0036.305] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.305] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0036.305] lstrlenW (lpString=".1cd") returned 4
	[0036.305] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.305] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0036.305] lstrlenW (lpString=".jpg") returned 4
	[0036.305] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.305] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0036.305] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0036.305] lstrlenW (lpString=".doc") returned 4
	[0036.305] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.305] lstrlenW (lpString=".docx") returned 5
	[0036.305] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.305] lstrlenW (lpString=".pdf") returned 4
	[0036.305] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.305] lstrlenW (lpString=".xls") returned 4
	[0036.305] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.305] lstrlenW (lpString=".xlsx") returned 5
	[0036.305] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.305] lstrlenW (lpString=".ppt") returned 4
	[0036.305] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.305] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0036.305] lstrlenW (lpString=".zip") returned 4
	[0036.305] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.305] lstrlenW (lpString=".rar") returned 4
	[0036.305] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.305] lstrlenW (lpString=".bz2") returned 4
	[0036.305] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.306] lstrlenW (lpString=".7z") returned 3
	[0036.306] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.306] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0036.306] lstrlenW (lpString=".dbf") returned 4
	[0036.306] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.306] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0036.306] lstrlenW (lpString=".1cd") returned 4
	[0036.306] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.306] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 79
	[0036.306] lstrlenW (lpString=".jpg") returned 4
	[0036.306] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.306] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.306] lstrlenW (lpString="Proofing.xml") returned 12
	[0036.306] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.306] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=811) returned 1
	[0036.306] CloseHandle (hObject=0x194) returned 1
	[0036.306] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml")) returned 0x2020
	[0036.306] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.307] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.307] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.307] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.307] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0036.307] GetLastError () returned 0x0
	[0036.307] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x32b, lpOverlapped=0x0) returned 1
	[0036.308] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x330, lpOverlapped=0x0) returned 1
	[0036.310] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.310] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0036.310] SetEndOfFile (hFile=0x198) returned 1
	[0036.310] CloseHandle (hObject=0x198) returned 1
	[0036.310] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.310] SetEndOfFile (hFile=0x194) returned 1
	[0036.311] CloseHandle (hObject=0x194) returned 1
	[0036.311] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.311] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml")) returned 1
	[0036.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0036.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0036.312] lstrlenW (lpString=".doc") returned 4
	[0036.312] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.312] lstrlenW (lpString=".docx") returned 5
	[0036.312] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1
	[0036.312] lstrlenW (lpString=".pdf") returned 4
	[0036.312] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.312] lstrlenW (lpString=".xls") returned 4
	[0036.312] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.312] lstrlenW (lpString=".xlsx") returned 5
	[0036.312] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1
	[0036.312] lstrlenW (lpString=".ppt") returned 4
	[0036.312] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0036.312] lstrlenW (lpString=".zip") returned 4
	[0036.312] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.312] lstrlenW (lpString=".rar") returned 4
	[0036.312] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.312] lstrlenW (lpString=".bz2") returned 4
	[0036.312] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.312] lstrlenW (lpString=".7z") returned 3
	[0036.312] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0036.312] lstrlenW (lpString=".dbf") returned 4
	[0036.312] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.312] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0036.312] lstrlenW (lpString=".1cd") returned 4
	[0036.313] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.313] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0036.313] lstrlenW (lpString=".jpg") returned 4
	[0036.313] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.313] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0036.313] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0036.313] lstrlenW (lpString=".doc") returned 4
	[0036.313] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.313] lstrlenW (lpString=".docx") returned 5
	[0036.313] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1
	[0036.313] lstrlenW (lpString=".pdf") returned 4
	[0036.313] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.313] lstrlenW (lpString=".xls") returned 4
	[0036.313] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.313] lstrlenW (lpString=".xlsx") returned 5
	[0036.313] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1
	[0036.313] lstrlenW (lpString=".ppt") returned 4
	[0036.313] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.313] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0036.313] lstrlenW (lpString=".zip") returned 4
	[0036.313] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.313] lstrlenW (lpString=".rar") returned 4
	[0036.313] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.313] lstrlenW (lpString=".bz2") returned 4
	[0036.313] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.313] lstrlenW (lpString=".7z") returned 3
	[0036.313] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.313] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0036.313] lstrlenW (lpString=".dbf") returned 4
	[0036.313] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.313] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0036.313] lstrlenW (lpString=".1cd") returned 4
	[0036.314] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.314] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 75
	[0036.314] lstrlenW (lpString=".jpg") returned 4
	[0036.314] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.314] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.314] lstrlenW (lpString="Setup.xml") returned 9
	[0036.314] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.314] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=5884) returned 1
	[0036.314] CloseHandle (hObject=0x194) returned 1
	[0036.314] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.314] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.314] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.314] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.314] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.315] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0036.315] GetLastError () returned 0x0
	[0036.315] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x16fc, lpOverlapped=0x0) returned 1
	[0036.316] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x1700, lpOverlapped=0x0) returned 1
	[0036.317] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.317] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.318] SetEndOfFile (hFile=0x198) returned 1
	[0036.318] CloseHandle (hObject=0x198) returned 1
	[0036.318] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.318] SetEndOfFile (hFile=0x194) returned 1
	[0036.319] CloseHandle (hObject=0x194) returned 1
	[0036.319] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.319] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.320] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.320] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.320] lstrlenW (lpString=".doc") returned 4
	[0036.320] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.320] lstrlenW (lpString=".docx") returned 5
	[0036.320] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.320] lstrlenW (lpString=".pdf") returned 4
	[0036.320] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.320] lstrlenW (lpString=".xls") returned 4
	[0036.320] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.320] lstrlenW (lpString=".xlsx") returned 5
	[0036.320] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.320] lstrlenW (lpString=".ppt") returned 4
	[0036.320] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.320] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.320] lstrlenW (lpString=".zip") returned 4
	[0036.320] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.320] lstrlenW (lpString=".rar") returned 4
	[0036.320] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.320] lstrlenW (lpString=".bz2") returned 4
	[0036.320] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.320] lstrlenW (lpString=".7z") returned 3
	[0036.320] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.320] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.320] lstrlenW (lpString=".dbf") returned 4
	[0036.320] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.320] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.320] lstrlenW (lpString=".1cd") returned 4
	[0036.320] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.320] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.321] lstrlenW (lpString=".jpg") returned 4
	[0036.321] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.321] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.321] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.321] lstrlenW (lpString=".doc") returned 4
	[0036.321] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.321] lstrlenW (lpString=".docx") returned 5
	[0036.321] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.321] lstrlenW (lpString=".pdf") returned 4
	[0036.321] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.321] lstrlenW (lpString=".xls") returned 4
	[0036.321] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.321] lstrlenW (lpString=".xlsx") returned 5
	[0036.321] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.321] lstrlenW (lpString=".ppt") returned 4
	[0036.321] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.321] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.321] lstrlenW (lpString=".zip") returned 4
	[0036.321] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.321] lstrlenW (lpString=".rar") returned 4
	[0036.321] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.321] lstrlenW (lpString=".bz2") returned 4
	[0036.321] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.321] lstrlenW (lpString=".7z") returned 3
	[0036.321] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.321] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.321] lstrlenW (lpString=".dbf") returned 4
	[0036.321] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.321] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.321] lstrlenW (lpString=".1cd") returned 4
	[0036.321] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.321] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.322] lstrlenW (lpString=".jpg") returned 4
	[0036.322] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.322] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.322] lstrlenW (lpString="Office32MUI.xml") returned 15
	[0036.322] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.324] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1383) returned 1
	[0036.324] CloseHandle (hObject=0x194) returned 1
	[0036.324] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml")) returned 0x2020
	[0036.324] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.324] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.324] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.324] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.325] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0036.325] GetLastError () returned 0x0
	[0036.325] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x567, lpOverlapped=0x0) returned 1
	[0036.326] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x570, lpOverlapped=0x0) returned 1
	[0036.327] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.327] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xf2, lpOverlapped=0x0) returned 1
	[0036.327] SetEndOfFile (hFile=0x198) returned 1
	[0036.328] CloseHandle (hObject=0x198) returned 1
	[0036.328] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.328] SetEndOfFile (hFile=0x194) returned 1
	[0036.329] CloseHandle (hObject=0x194) returned 1
	[0036.329] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.329] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml")) returned 1
	[0036.329] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0036.329] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0036.329] lstrlenW (lpString=".doc") returned 4
	[0036.330] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.330] lstrlenW (lpString=".docx") returned 5
	[0036.330] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.330] lstrlenW (lpString=".pdf") returned 4
	[0036.330] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.330] lstrlenW (lpString=".xls") returned 4
	[0036.330] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.330] lstrlenW (lpString=".xlsx") returned 5
	[0036.330] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.330] lstrlenW (lpString=".ppt") returned 4
	[0036.330] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.330] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0036.330] lstrlenW (lpString=".zip") returned 4
	[0036.330] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.330] lstrlenW (lpString=".rar") returned 4
	[0036.330] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.330] lstrlenW (lpString=".bz2") returned 4
	[0036.330] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.330] lstrlenW (lpString=".7z") returned 3
	[0036.330] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.330] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0036.330] lstrlenW (lpString=".dbf") returned 4
	[0036.330] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.330] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0036.330] lstrlenW (lpString=".1cd") returned 4
	[0036.330] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.330] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0036.330] lstrlenW (lpString=".jpg") returned 4
	[0036.330] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.330] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0036.330] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0036.330] lstrlenW (lpString=".doc") returned 4
	[0036.331] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.331] lstrlenW (lpString=".docx") returned 5
	[0036.331] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.331] lstrlenW (lpString=".pdf") returned 4
	[0036.331] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.331] lstrlenW (lpString=".xls") returned 4
	[0036.331] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.331] lstrlenW (lpString=".xlsx") returned 5
	[0036.331] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.331] lstrlenW (lpString=".ppt") returned 4
	[0036.331] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.331] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0036.331] lstrlenW (lpString=".zip") returned 4
	[0036.331] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.331] lstrlenW (lpString=".rar") returned 4
	[0036.331] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.331] lstrlenW (lpString=".bz2") returned 4
	[0036.331] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.331] lstrlenW (lpString=".7z") returned 3
	[0036.331] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.331] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0036.331] lstrlenW (lpString=".dbf") returned 4
	[0036.331] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.331] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0036.331] lstrlenW (lpString=".1cd") returned 4
	[0036.331] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.331] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 78
	[0036.331] lstrlenW (lpString=".jpg") returned 4
	[0036.331] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.332] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.332] lstrlenW (lpString="Setup.xml") returned 9
	[0036.332] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.332] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=2362) returned 1
	[0036.332] CloseHandle (hObject=0x194) returned 1
	[0036.332] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.332] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.332] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.332] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.332] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.332] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0036.333] GetLastError () returned 0x0
	[0036.333] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x93a, lpOverlapped=0x0) returned 1
	[0036.715] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x940, lpOverlapped=0x0) returned 1
	[0036.716] ReadFile (in: hFile=0x194, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.716] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.716] SetEndOfFile (hFile=0x198) returned 1
	[0036.716] CloseHandle (hObject=0x198) returned 1
	[0036.717] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.717] SetEndOfFile (hFile=0x194) returned 1
	[0036.718] CloseHandle (hObject=0x194) returned 1
	[0036.718] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.718] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.718] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.719] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.719] lstrlenW (lpString=".doc") returned 4
	[0036.719] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.719] lstrlenW (lpString=".docx") returned 5
	[0036.719] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.719] lstrlenW (lpString=".pdf") returned 4
	[0036.719] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.719] lstrlenW (lpString=".xls") returned 4
	[0036.719] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.719] lstrlenW (lpString=".xlsx") returned 5
	[0036.719] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.719] lstrlenW (lpString=".ppt") returned 4
	[0036.719] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.719] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.719] lstrlenW (lpString=".zip") returned 4
	[0036.719] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.719] lstrlenW (lpString=".rar") returned 4
	[0036.719] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.719] lstrlenW (lpString=".bz2") returned 4
	[0036.719] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.719] lstrlenW (lpString=".7z") returned 3
	[0036.719] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.719] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.719] lstrlenW (lpString=".dbf") returned 4
	[0036.719] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.719] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.719] lstrlenW (lpString=".1cd") returned 4
	[0036.719] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.719] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.719] lstrlenW (lpString=".jpg") returned 4
	[0036.719] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.720] lstrlenW (lpString=".doc") returned 4
	[0036.720] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.720] lstrlenW (lpString=".docx") returned 5
	[0036.720] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.720] lstrlenW (lpString=".pdf") returned 4
	[0036.720] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.720] lstrlenW (lpString=".xls") returned 4
	[0036.720] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.720] lstrlenW (lpString=".xlsx") returned 5
	[0036.720] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.720] lstrlenW (lpString=".ppt") returned 4
	[0036.720] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.720] lstrlenW (lpString=".zip") returned 4
	[0036.720] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.720] lstrlenW (lpString=".rar") returned 4
	[0036.720] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.720] lstrlenW (lpString=".bz2") returned 4
	[0036.720] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.720] lstrlenW (lpString=".7z") returned 3
	[0036.720] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.720] lstrlenW (lpString=".dbf") returned 4
	[0036.720] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.720] lstrlenW (lpString=".1cd") returned 4
	[0036.720] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.720] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.720] lstrlenW (lpString=".jpg") returned 4
	[0036.720] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.721] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.721] lstrlenW (lpString="Setup.xml") returned 9
	[0036.721] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4
	[0036.846] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1872) returned 1
	[0036.846] CloseHandle (hObject=0x1c4) returned 1
	[0036.847] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.847] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.847] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4
	[0036.847] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.847] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.847] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0036.847] GetLastError () returned 0x0
	[0036.847] ReadFile (in: hFile=0x1c4, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x750, lpOverlapped=0x0) returned 1
	[0036.857] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x760, lpOverlapped=0x0) returned 1
	[0036.858] ReadFile (in: hFile=0x1c4, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.858] WriteFile (in: hFile=0x198, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.858] SetEndOfFile (hFile=0x198) returned 1
	[0036.858] CloseHandle (hObject=0x198) returned 1
	[0036.859] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.859] SetEndOfFile (hFile=0x1c4) returned 1
	[0036.859] CloseHandle (hObject=0x1c4) returned 1
	[0036.859] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.860] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.860] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.860] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.860] lstrlenW (lpString=".doc") returned 4
	[0036.860] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.860] lstrlenW (lpString=".docx") returned 5
	[0036.860] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.860] lstrlenW (lpString=".pdf") returned 4
	[0036.860] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.860] lstrlenW (lpString=".xls") returned 4
	[0036.860] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.860] lstrlenW (lpString=".xlsx") returned 5
	[0036.860] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.860] lstrlenW (lpString=".ppt") returned 4
	[0036.860] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.860] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.860] lstrlenW (lpString=".zip") returned 4
	[0036.860] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.860] lstrlenW (lpString=".rar") returned 4
	[0036.860] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.860] lstrlenW (lpString=".bz2") returned 4
	[0036.860] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.861] lstrlenW (lpString=".7z") returned 3
	[0036.861] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.861] lstrlenW (lpString=".dbf") returned 4
	[0036.861] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.861] lstrlenW (lpString=".1cd") returned 4
	[0036.861] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.861] lstrlenW (lpString=".jpg") returned 4
	[0036.861] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.861] lstrlenW (lpString=".doc") returned 4
	[0036.861] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.861] lstrlenW (lpString=".docx") returned 5
	[0036.861] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.861] lstrlenW (lpString=".pdf") returned 4
	[0036.861] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.861] lstrlenW (lpString=".xls") returned 4
	[0036.861] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.861] lstrlenW (lpString=".xlsx") returned 5
	[0036.861] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.861] lstrlenW (lpString=".ppt") returned 4
	[0036.861] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.861] lstrlenW (lpString=".zip") returned 4
	[0036.861] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.861] lstrlenW (lpString=".rar") returned 4
	[0036.861] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.861] lstrlenW (lpString=".bz2") returned 4
	[0036.861] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.861] lstrlenW (lpString=".7z") returned 3
	[0036.862] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.862] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.862] lstrlenW (lpString=".dbf") returned 4
	[0036.862] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.862] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.862] lstrlenW (lpString=".1cd") returned 4
	[0036.862] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.862] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.862] lstrlenW (lpString=".jpg") returned 4
	[0036.862] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.862] lstrcmpiW (lpString1=".chm", lpString2=".beets") returned 1
	[0036.862] lstrlenW (lpString="pss10r.chm") returned 10
	[0036.862] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0037.325] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=27195) returned 1
	[0037.325] CloseHandle (hObject=0x190) returned 1
	[0037.325] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm")) returned 0x2020
	[0037.325] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0037.325] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0037.325] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.325] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.325] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc
	[0037.326] GetLastError () returned 0x0
	[0037.326] ReadFile (in: hFile=0x190, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x6a3b, lpOverlapped=0x0) returned 1
	[0037.513] WriteFile (in: hFile=0x1cc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x6a40, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x6a40, lpOverlapped=0x0) returned 1
	[0037.514] ReadFile (in: hFile=0x190, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0037.514] WriteFile (in: hFile=0x1cc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0037.514] SetEndOfFile (hFile=0x1cc) returned 1
	[0037.514] CloseHandle (hObject=0x1cc) returned 1
	[0037.515] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.515] SetEndOfFile (hFile=0x190) returned 1
	[0037.517] CloseHandle (hObject=0x190) returned 1
	[0037.517] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0037.517] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm")) returned 1
	[0037.517] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73
	[0037.517] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73
	[0037.517] lstrlenW (lpString=".doc") returned 4
	[0037.517] lstrcmpiW (lpString1=".doc", lpString2=".chm") returned 1
	[0037.517] lstrlenW (lpString=".docx") returned 5
	[0037.517] lstrcmpiW (lpString1=".docx", lpString2="r.chm") returned -1
	[0037.517] lstrlenW (lpString=".pdf") returned 4
	[0037.517] lstrcmpiW (lpString1=".pdf", lpString2=".chm") returned 1
	[0037.517] lstrlenW (lpString=".xls") returned 4
	[0037.517] lstrcmpiW (lpString1=".xls", lpString2=".chm") returned 1
	[0037.517] lstrlenW (lpString=".xlsx") returned 5
	[0037.517] lstrcmpiW (lpString1=".xlsx", lpString2="r.chm") returned -1
	[0037.517] lstrlenW (lpString=".ppt") returned 4
	[0037.517] lstrcmpiW (lpString1=".ppt", lpString2=".chm") returned 1
	[0037.517] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73
	[0037.517] lstrlenW (lpString=".zip") returned 4
	[0037.518] lstrcmpiW (lpString1=".zip", lpString2=".chm") returned 1
	[0037.518] lstrlenW (lpString=".rar") returned 4
	[0037.518] lstrcmpiW (lpString1=".rar", lpString2=".chm") returned 1
	[0037.518] lstrlenW (lpString=".bz2") returned 4
	[0037.518] lstrcmpiW (lpString1=".bz2", lpString2=".chm") returned -1
	[0037.518] lstrlenW (lpString=".7z") returned 3
	[0037.518] lstrcmpiW (lpString1=".7z", lpString2="chm") returned -1
	[0037.518] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73
	[0037.518] lstrlenW (lpString=".dbf") returned 4
	[0037.518] lstrcmpiW (lpString1=".dbf", lpString2=".chm") returned 1
	[0037.518] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73
	[0037.518] lstrlenW (lpString=".1cd") returned 4
	[0037.518] lstrcmpiW (lpString1=".1cd", lpString2=".chm") returned -1
	[0037.518] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73
	[0037.518] lstrlenW (lpString=".jpg") returned 4
	[0037.518] lstrcmpiW (lpString1=".jpg", lpString2=".chm") returned 1
	[0037.518] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73
	[0037.518] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73
	[0037.518] lstrlenW (lpString=".doc") returned 4
	[0037.518] lstrcmpiW (lpString1=".doc", lpString2=".chm") returned 1
	[0037.518] lstrlenW (lpString=".docx") returned 5
	[0037.518] lstrcmpiW (lpString1=".docx", lpString2="r.chm") returned -1
	[0037.518] lstrlenW (lpString=".pdf") returned 4
	[0037.518] lstrcmpiW (lpString1=".pdf", lpString2=".chm") returned 1
	[0037.518] lstrlenW (lpString=".xls") returned 4
	[0037.518] lstrcmpiW (lpString1=".xls", lpString2=".chm") returned 1
	[0037.518] lstrlenW (lpString=".xlsx") returned 5
	[0037.518] lstrcmpiW (lpString1=".xlsx", lpString2="r.chm") returned -1
	[0037.518] lstrlenW (lpString=".ppt") returned 4
	[0037.518] lstrcmpiW (lpString1=".ppt", lpString2=".chm") returned 1
	[0037.518] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73
	[0037.518] lstrlenW (lpString=".zip") returned 4
	[0037.518] lstrcmpiW (lpString1=".zip", lpString2=".chm") returned 1
	[0037.519] lstrlenW (lpString=".rar") returned 4
	[0037.519] lstrcmpiW (lpString1=".rar", lpString2=".chm") returned 1
	[0037.519] lstrlenW (lpString=".bz2") returned 4
	[0037.519] lstrcmpiW (lpString1=".bz2", lpString2=".chm") returned -1
	[0037.519] lstrlenW (lpString=".7z") returned 3
	[0037.519] lstrcmpiW (lpString1=".7z", lpString2="chm") returned -1
	[0037.519] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73
	[0037.519] lstrlenW (lpString=".dbf") returned 4
	[0037.519] lstrcmpiW (lpString1=".dbf", lpString2=".chm") returned 1
	[0037.519] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73
	[0037.519] lstrlenW (lpString=".1cd") returned 4
	[0037.519] lstrcmpiW (lpString1=".1cd", lpString2=".chm") returned -1
	[0037.519] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 73
	[0037.519] lstrlenW (lpString=".jpg") returned 4
	[0037.519] lstrcmpiW (lpString1=".jpg", lpString2=".chm") returned 1
	[0037.519] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0037.519] lstrlenW (lpString="ProPlusrWW.xml") returned 14
	[0037.519] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0037.621] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=16852) returned 1
	[0037.622] CloseHandle (hObject=0x19c) returned 1
	[0037.622] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml")) returned 0x2020
	[0037.640] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0037.640] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0037.651] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.651] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.651] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0038.268] GetLastError () returned 0x0
	[0038.268] ReadFile (in: hFile=0x19c, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x41d4, lpOverlapped=0x0) returned 1
	[0038.278] WriteFile (in: hFile=0x1a0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x41e0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x41e0, lpOverlapped=0x0) returned 1
	[0038.279] ReadFile (in: hFile=0x19c, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0038.279] WriteFile (in: hFile=0x1a0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xf0, lpOverlapped=0x0) returned 1
	[0038.279] SetEndOfFile (hFile=0x1a0) returned 1
	[0038.279] CloseHandle (hObject=0x1a0) returned 1
	[0038.280] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.280] SetEndOfFile (hFile=0x19c) returned 1
	[0038.281] CloseHandle (hObject=0x19c) returned 1
	[0038.281] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0038.281] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml")) returned 1
	[0038.281] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0038.281] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0038.281] lstrlenW (lpString=".doc") returned 4
	[0038.281] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.281] lstrlenW (lpString=".docx") returned 5
	[0038.281] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1
	[0038.282] lstrlenW (lpString=".pdf") returned 4
	[0038.282] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.282] lstrlenW (lpString=".xls") returned 4
	[0038.282] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.282] lstrlenW (lpString=".xlsx") returned 5
	[0038.282] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1
	[0038.282] lstrlenW (lpString=".ppt") returned 4
	[0038.282] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.282] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0038.282] lstrlenW (lpString=".zip") returned 4
	[0038.282] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.282] lstrlenW (lpString=".rar") returned 4
	[0038.282] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.282] lstrlenW (lpString=".bz2") returned 4
	[0038.282] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.282] lstrlenW (lpString=".7z") returned 3
	[0038.282] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.282] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0038.282] lstrlenW (lpString=".dbf") returned 4
	[0038.282] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.282] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0038.282] lstrlenW (lpString=".1cd") returned 4
	[0038.282] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.282] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0038.282] lstrlenW (lpString=".jpg") returned 4
	[0038.282] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.282] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0038.282] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0038.282] lstrlenW (lpString=".doc") returned 4
	[0038.282] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.282] lstrlenW (lpString=".docx") returned 5
	[0038.282] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1
	[0038.283] lstrlenW (lpString=".pdf") returned 4
	[0038.283] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.283] lstrlenW (lpString=".xls") returned 4
	[0038.283] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.283] lstrlenW (lpString=".xlsx") returned 5
	[0038.283] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1
	[0038.283] lstrlenW (lpString=".ppt") returned 4
	[0038.283] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.283] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0038.283] lstrlenW (lpString=".zip") returned 4
	[0038.283] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.283] lstrlenW (lpString=".rar") returned 4
	[0038.283] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.283] lstrlenW (lpString=".bz2") returned 4
	[0038.283] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.283] lstrlenW (lpString=".7z") returned 3
	[0038.283] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.283] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0038.283] lstrlenW (lpString=".dbf") returned 4
	[0038.283] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.283] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0038.283] lstrlenW (lpString=".1cd") returned 4
	[0038.283] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.283] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 77
	[0038.283] lstrlenW (lpString=".jpg") returned 4
	[0038.283] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.283] lstrcmpiW (lpString1=".avi", lpString2=".beets") returned -1
	[0038.283] lstrlenW (lpString="boxed-delete.avi") returned 16
	[0038.284] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0039.014] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=31744) returned 1
	[0039.014] CloseHandle (hObject=0x1d8) returned 1
	[0039.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20
	[0039.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.014] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0039.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0039.014] lstrlenW (lpString=".doc") returned 4
	[0039.014] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.014] lstrlenW (lpString=".docx") returned 5
	[0039.014] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0039.014] lstrlenW (lpString=".pdf") returned 4
	[0039.014] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.015] lstrlenW (lpString=".xls") returned 4
	[0039.015] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.015] lstrlenW (lpString=".xlsx") returned 5
	[0039.015] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0039.015] lstrlenW (lpString=".ppt") returned 4
	[0039.015] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0039.015] lstrlenW (lpString=".zip") returned 4
	[0039.015] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.015] lstrlenW (lpString=".rar") returned 4
	[0039.015] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.015] lstrlenW (lpString=".bz2") returned 4
	[0039.015] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.015] lstrlenW (lpString=".7z") returned 3
	[0039.015] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0039.015] lstrlenW (lpString=".dbf") returned 4
	[0039.015] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0039.015] lstrlenW (lpString=".1cd") returned 4
	[0039.015] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0039.015] lstrlenW (lpString=".jpg") returned 4
	[0039.015] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0039.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0039.015] lstrlenW (lpString=".doc") returned 4
	[0039.015] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.015] lstrlenW (lpString=".docx") returned 5
	[0039.015] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0039.015] lstrlenW (lpString=".pdf") returned 4
	[0039.015] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.016] lstrlenW (lpString=".xls") returned 4
	[0039.016] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.016] lstrlenW (lpString=".xlsx") returned 5
	[0039.016] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0039.016] lstrlenW (lpString=".ppt") returned 4
	[0039.016] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0039.016] lstrlenW (lpString=".zip") returned 4
	[0039.016] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.016] lstrlenW (lpString=".rar") returned 4
	[0039.016] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.016] lstrlenW (lpString=".bz2") returned 4
	[0039.016] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.016] lstrlenW (lpString=".7z") returned 3
	[0039.016] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0039.016] lstrlenW (lpString=".dbf") returned 4
	[0039.016] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0039.016] lstrlenW (lpString=".1cd") returned 4
	[0039.016] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0039.016] lstrlenW (lpString=".jpg") returned 4
	[0039.016] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.016] lstrcmpiW (lpString1=".avi", lpString2=".beets") returned -1
	[0039.016] lstrlenW (lpString="join.avi") returned 8
	[0039.016] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0039.017] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=222208) returned 1
	[0039.017] CloseHandle (hObject=0x1d8) returned 1
	[0039.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20
	[0039.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.017] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi") returned 65
	[0039.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi") returned 65
	[0039.017] lstrlenW (lpString=".doc") returned 4
	[0039.017] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.017] lstrlenW (lpString=".docx") returned 5
	[0039.017] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0039.017] lstrlenW (lpString=".pdf") returned 4
	[0039.017] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.017] lstrlenW (lpString=".xls") returned 4
	[0039.017] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.017] lstrlenW (lpString=".xlsx") returned 5
	[0039.017] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0039.017] lstrlenW (lpString=".ppt") returned 4
	[0039.017] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi") returned 65
	[0039.017] lstrlenW (lpString=".zip") returned 4
	[0039.018] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.018] lstrlenW (lpString=".rar") returned 4
	[0039.018] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.018] lstrlenW (lpString=".bz2") returned 4
	[0039.018] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.018] lstrlenW (lpString=".7z") returned 3
	[0039.018] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi") returned 65
	[0039.018] lstrlenW (lpString=".dbf") returned 4
	[0039.018] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi") returned 65
	[0039.018] lstrlenW (lpString=".1cd") returned 4
	[0039.018] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi") returned 65
	[0039.018] lstrlenW (lpString=".jpg") returned 4
	[0039.018] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi") returned 65
	[0039.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi") returned 65
	[0039.018] lstrlenW (lpString=".doc") returned 4
	[0039.018] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.018] lstrlenW (lpString=".docx") returned 5
	[0039.018] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0039.018] lstrlenW (lpString=".pdf") returned 4
	[0039.018] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.018] lstrlenW (lpString=".xls") returned 4
	[0039.018] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.018] lstrlenW (lpString=".xlsx") returned 5
	[0039.018] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0039.018] lstrlenW (lpString=".ppt") returned 4
	[0039.018] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi") returned 65
	[0039.018] lstrlenW (lpString=".zip") returned 4
	[0039.019] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.019] lstrlenW (lpString=".rar") returned 4
	[0039.019] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.019] lstrlenW (lpString=".bz2") returned 4
	[0039.019] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.019] lstrlenW (lpString=".7z") returned 3
	[0039.019] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi") returned 65
	[0039.019] lstrlenW (lpString=".dbf") returned 4
	[0039.019] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi") returned 65
	[0039.019] lstrlenW (lpString=".1cd") returned 4
	[0039.019] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi") returned 65
	[0039.019] lstrlenW (lpString=".jpg") returned 4
	[0039.019] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.019] lstrcmpiW (lpString1=".avi", lpString2=".beets") returned -1
	[0039.019] lstrlenW (lpString="split.avi") returned 9
	[0039.019] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0039.019] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=194048) returned 1
	[0039.019] CloseHandle (hObject=0x1d8) returned 1
	[0039.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20
	[0039.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.020] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi") returned 66
	[0039.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi") returned 66
	[0039.020] lstrlenW (lpString=".doc") returned 4
	[0039.020] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.020] lstrlenW (lpString=".docx") returned 5
	[0039.020] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0039.020] lstrlenW (lpString=".pdf") returned 4
	[0039.020] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.020] lstrlenW (lpString=".xls") returned 4
	[0039.020] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.020] lstrlenW (lpString=".xlsx") returned 5
	[0039.020] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0039.020] lstrlenW (lpString=".ppt") returned 4
	[0039.020] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi") returned 66
	[0039.020] lstrlenW (lpString=".zip") returned 4
	[0039.020] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.020] lstrlenW (lpString=".rar") returned 4
	[0039.020] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.020] lstrlenW (lpString=".bz2") returned 4
	[0039.020] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.020] lstrlenW (lpString=".7z") returned 3
	[0039.020] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi") returned 66
	[0039.020] lstrlenW (lpString=".dbf") returned 4
	[0039.020] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi") returned 66
	[0039.021] lstrlenW (lpString=".1cd") returned 4
	[0039.021] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi") returned 66
	[0039.021] lstrlenW (lpString=".jpg") returned 4
	[0039.021] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi") returned 66
	[0039.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi") returned 66
	[0039.021] lstrlenW (lpString=".doc") returned 4
	[0039.021] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.021] lstrlenW (lpString=".docx") returned 5
	[0039.021] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0039.021] lstrlenW (lpString=".pdf") returned 4
	[0039.021] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.021] lstrlenW (lpString=".xls") returned 4
	[0039.021] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.021] lstrlenW (lpString=".xlsx") returned 5
	[0039.021] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0039.021] lstrlenW (lpString=".ppt") returned 4
	[0039.021] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi") returned 66
	[0039.021] lstrlenW (lpString=".zip") returned 4
	[0039.021] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.021] lstrlenW (lpString=".rar") returned 4
	[0039.021] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.021] lstrlenW (lpString=".bz2") returned 4
	[0039.021] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.021] lstrlenW (lpString=".7z") returned 3
	[0039.021] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi") returned 66
	[0039.021] lstrlenW (lpString=".dbf") returned 4
	[0039.021] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi") returned 66
	[0039.022] lstrlenW (lpString=".1cd") returned 4
	[0039.022] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi") returned 66
	[0039.022] lstrlenW (lpString=".jpg") returned 4
	[0039.022] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.022] lstrcmpiW (lpString1=".avi", lpString2=".beets") returned -1
	[0039.022] lstrlenW (lpString="FlickAnimation.avi") returned 18
	[0039.022] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0039.022] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1600388) returned 1
	[0039.022] CloseHandle (hObject=0x1d8) returned 1
	[0039.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0x20
	[0039.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.023] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0039.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi") returned 69
	[0039.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi") returned 69
	[0039.023] lstrlenW (lpString=".doc") returned 4
	[0039.023] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.023] lstrlenW (lpString=".docx") returned 5
	[0039.023] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0039.023] lstrlenW (lpString=".pdf") returned 4
	[0039.023] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.023] lstrlenW (lpString=".xls") returned 4
	[0039.023] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.023] lstrlenW (lpString=".xlsx") returned 5
	[0039.023] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0039.023] lstrlenW (lpString=".ppt") returned 4
	[0039.023] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi") returned 69
	[0039.023] lstrlenW (lpString=".zip") returned 4
	[0039.023] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.023] lstrlenW (lpString=".rar") returned 4
	[0039.023] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.023] lstrlenW (lpString=".bz2") returned 4
	[0039.024] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.024] lstrlenW (lpString=".7z") returned 3
	[0039.024] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi") returned 69
	[0039.024] lstrlenW (lpString=".dbf") returned 4
	[0039.024] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi") returned 69
	[0039.024] lstrlenW (lpString=".1cd") returned 4
	[0039.024] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi") returned 69
	[0039.024] lstrlenW (lpString=".jpg") returned 4
	[0039.024] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi") returned 69
	[0039.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi") returned 69
	[0039.024] lstrlenW (lpString=".doc") returned 4
	[0039.024] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.024] lstrlenW (lpString=".docx") returned 5
	[0039.024] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0039.024] lstrlenW (lpString=".pdf") returned 4
	[0039.024] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.024] lstrlenW (lpString=".xls") returned 4
	[0039.024] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.024] lstrlenW (lpString=".xlsx") returned 5
	[0039.024] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0039.024] lstrlenW (lpString=".ppt") returned 4
	[0039.024] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi") returned 69
	[0039.024] lstrlenW (lpString=".zip") returned 4
	[0039.024] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.024] lstrlenW (lpString=".rar") returned 4
	[0039.024] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.024] lstrlenW (lpString=".bz2") returned 4
	[0039.024] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.025] lstrlenW (lpString=".7z") returned 3
	[0039.025] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi") returned 69
	[0039.025] lstrlenW (lpString=".dbf") returned 4
	[0039.025] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi") returned 69
	[0039.025] lstrlenW (lpString=".1cd") returned 4
	[0039.025] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi") returned 69
	[0039.025] lstrlenW (lpString=".jpg") returned 4
	[0039.025] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.025] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0039.025] lstrlenW (lpString="auxbase.xml") returned 11
	[0039.025] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0039.030] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1434) returned 1
	[0039.030] CloseHandle (hObject=0x1d8) returned 1
	[0039.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20
	[0039.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.030] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0039.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0039.030] lstrlenW (lpString=".doc") returned 4
	[0039.030] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.030] lstrlenW (lpString=".docx") returned 5
	[0039.030] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0039.030] lstrlenW (lpString=".pdf") returned 4
	[0039.030] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.030] lstrlenW (lpString=".xls") returned 4
	[0039.030] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.030] lstrlenW (lpString=".xlsx") returned 5
	[0039.030] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0039.030] lstrlenW (lpString=".ppt") returned 4
	[0039.030] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0039.030] lstrlenW (lpString=".zip") returned 4
	[0039.030] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.031] lstrlenW (lpString=".rar") returned 4
	[0039.031] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.031] lstrlenW (lpString=".bz2") returned 4
	[0039.031] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.031] lstrlenW (lpString=".7z") returned 3
	[0039.031] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.031] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0039.031] lstrlenW (lpString=".dbf") returned 4
	[0039.031] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.031] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0039.031] lstrlenW (lpString=".1cd") returned 4
	[0039.031] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.031] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0039.031] lstrlenW (lpString=".jpg") returned 4
	[0039.031] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.031] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0039.031] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0039.031] lstrlenW (lpString=".doc") returned 4
	[0039.031] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.031] lstrlenW (lpString=".docx") returned 5
	[0039.031] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0039.031] lstrlenW (lpString=".pdf") returned 4
	[0039.031] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.031] lstrlenW (lpString=".xls") returned 4
	[0039.031] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.031] lstrlenW (lpString=".xlsx") returned 5
	[0039.031] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0039.031] lstrlenW (lpString=".ppt") returned 4
	[0039.031] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.031] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0039.031] lstrlenW (lpString=".zip") returned 4
	[0039.031] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.032] lstrlenW (lpString=".rar") returned 4
	[0039.032] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.032] lstrlenW (lpString=".bz2") returned 4
	[0039.032] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.032] lstrlenW (lpString=".7z") returned 3
	[0039.032] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0039.032] lstrlenW (lpString=".dbf") returned 4
	[0039.032] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0039.032] lstrlenW (lpString=".1cd") returned 4
	[0039.032] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0039.032] lstrlenW (lpString=".jpg") returned 4
	[0039.032] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.032] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0039.032] lstrlenW (lpString="auxpad.xml") returned 10
	[0039.032] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0039.064] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=212) returned 1
	[0039.064] CloseHandle (hObject=0x1d8) returned 1
	[0039.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20
	[0039.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.064] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0039.065] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0039.065] lstrlenW (lpString=".doc") returned 4
	[0039.065] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.065] lstrlenW (lpString=".docx") returned 5
	[0039.065] lstrcmpiW (lpString1=".docx", lpString2="d.xml") returned -1
	[0039.065] lstrlenW (lpString=".pdf") returned 4
	[0039.065] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.065] lstrlenW (lpString=".xls") returned 4
	[0039.065] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.065] lstrlenW (lpString=".xlsx") returned 5
	[0039.065] lstrcmpiW (lpString1=".xlsx", lpString2="d.xml") returned -1
	[0039.065] lstrlenW (lpString=".ppt") returned 4
	[0039.065] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.065] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0039.065] lstrlenW (lpString=".zip") returned 4
	[0039.065] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.065] lstrlenW (lpString=".rar") returned 4
	[0039.065] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.065] lstrlenW (lpString=".bz2") returned 4
	[0039.065] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.065] lstrlenW (lpString=".7z") returned 3
	[0039.065] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.065] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0039.065] lstrlenW (lpString=".dbf") returned 4
	[0039.065] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.083] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0039.084] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0039.084] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0039.085] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0039.414] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0039.415] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0039.415] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fc6c | out: lpNewFilePointer=0x0) returned 1
	[0039.415] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fc2c | out: lpNewFilePointer=0x0) returned 1
	[0039.415] ReadFile (in: hFile=0x1e4, lpBuffer=0x7ee0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x791fc38, lpOverlapped=0x0 | out: lpBuffer=0x7ee0058*, lpNumberOfBytesRead=0x791fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0039.419] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x88bff, lpNewFilePointer=0x0, dwMoveMethod=0x791fc2c | out: lpNewFilePointer=0x0) returned 1
	[0039.419] ReadFile (in: hFile=0x1e4, lpBuffer=0x7f20058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x791fc38, lpOverlapped=0x0 | out: lpBuffer=0x7f20058*, lpNumberOfBytesRead=0x791fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0039.425] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x791fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0039.425] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x15a3ff, lpNewFilePointer=0x0, dwMoveMethod=0x791fc2c | out: lpNewFilePointer=0x0) returned 1
	[0039.425] ReadFile (in: hFile=0x1e4, lpBuffer=0x7f60058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x791fc38, lpOverlapped=0x0 | out: lpBuffer=0x7f60058*, lpNumberOfBytesRead=0x791fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0039.440] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.440] WriteFile (in: hFile=0x1e4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x791fcb0, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fcb0*=0xc0100, lpOverlapped=0x0) returned 1
	[0039.720] SetEndOfFile (hFile=0x1e4) returned 1
	[0039.720] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d3d110
	[0039.724] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fc7c | out: lpNewFilePointer=0x0) returned 1
	[0039.725] WriteFile (in: hFile=0x1e4, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x791fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x791fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0039.726] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x88bff, lpNewFilePointer=0x0, dwMoveMethod=0x791fc7c | out: lpNewFilePointer=0x0) returned 1
	[0039.726] WriteFile (in: hFile=0x1e4, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x791fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x791fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0039.728] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x15a3ff, lpNewFilePointer=0x0, dwMoveMethod=0x791fc7c | out: lpNewFilePointer=0x0) returned 1
	[0039.729] WriteFile (in: hFile=0x1e4, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x791fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x791fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0039.731] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d3d110 | out: hHeap=0x5350000) returned 1
	[0039.731] CloseHandle (hObject=0x1e4) returned 1
	[0040.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71
	[0040.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71
	[0040.136] lstrlenW (lpString=".doc") returned 4
	[0040.136] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0040.136] lstrlenW (lpString=".docx") returned 5
	[0040.136] lstrcmpiW (lpString1=".docx", lpString2="0.CHM") returned -1
	[0040.136] lstrlenW (lpString=".pdf") returned 4
	[0040.136] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0040.136] lstrlenW (lpString=".xls") returned 4
	[0040.136] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0040.136] lstrlenW (lpString=".xlsx") returned 5
	[0040.136] lstrcmpiW (lpString1=".xlsx", lpString2="0.CHM") returned -1
	[0040.136] lstrlenW (lpString=".ppt") returned 4
	[0040.136] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0040.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71
	[0040.136] lstrlenW (lpString=".zip") returned 4
	[0040.136] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0040.136] lstrlenW (lpString=".rar") returned 4
	[0040.136] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0040.136] lstrlenW (lpString=".bz2") returned 4
	[0040.136] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0040.136] lstrlenW (lpString=".7z") returned 3
	[0040.136] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0040.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71
	[0040.136] lstrlenW (lpString=".dbf") returned 4
	[0040.136] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0040.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71
	[0040.136] lstrlenW (lpString=".1cd") returned 4
	[0040.137] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0040.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71
	[0040.137] lstrlenW (lpString=".jpg") returned 4
	[0040.137] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0040.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71
	[0040.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71
	[0040.137] lstrlenW (lpString=".doc") returned 4
	[0040.137] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0040.137] lstrlenW (lpString=".docx") returned 5
	[0040.137] lstrcmpiW (lpString1=".docx", lpString2="0.CHM") returned -1
	[0040.137] lstrlenW (lpString=".pdf") returned 4
	[0040.137] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0040.137] lstrlenW (lpString=".xls") returned 4
	[0040.137] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0040.137] lstrlenW (lpString=".xlsx") returned 5
	[0040.137] lstrcmpiW (lpString1=".xlsx", lpString2="0.CHM") returned -1
	[0040.137] lstrlenW (lpString=".ppt") returned 4
	[0040.137] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0040.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71
	[0040.137] lstrlenW (lpString=".zip") returned 4
	[0040.137] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0040.137] lstrlenW (lpString=".rar") returned 4
	[0040.137] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0040.137] lstrlenW (lpString=".bz2") returned 4
	[0040.137] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0040.137] lstrlenW (lpString=".7z") returned 3
	[0040.137] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0040.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71
	[0040.137] lstrlenW (lpString=".dbf") returned 4
	[0040.137] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0040.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71
	[0040.137] lstrlenW (lpString=".1cd") returned 4
	[0040.137] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0040.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM") returned 71
	[0040.138] lstrlenW (lpString=".jpg") returned 4
	[0040.138] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0040.138] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0040.138] lstrlenW (lpString="SETUP.XML") returned 9
	[0040.138] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0040.138] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1852) returned 1
	[0040.138] CloseHandle (hObject=0x1e4) returned 1
	[0040.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml")) returned 0x20
	[0040.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.138] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0040.139] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.139] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.139] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0040.139] GetLastError () returned 0x0
	[0040.139] ReadFile (in: hFile=0x1e4, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x73c, lpOverlapped=0x0) returned 1
	[0040.298] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x740, lpOverlapped=0x0) returned 1
	[0040.298] ReadFile (in: hFile=0x1e4, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.298] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0040.299] SetEndOfFile (hFile=0x1e0) returned 1
	[0040.299] CloseHandle (hObject=0x1e0) returned 1
	[0040.299] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.299] SetEndOfFile (hFile=0x1e4) returned 1
	[0040.300] CloseHandle (hObject=0x1e4) returned 1
	[0040.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.300] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml")) returned 1
	[0040.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104
	[0040.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104
	[0040.301] lstrlenW (lpString=".doc") returned 4
	[0040.301] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.301] lstrlenW (lpString=".docx") returned 5
	[0040.301] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0040.301] lstrlenW (lpString=".pdf") returned 4
	[0040.301] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.301] lstrlenW (lpString=".xls") returned 4
	[0040.301] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.301] lstrlenW (lpString=".xlsx") returned 5
	[0040.301] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0040.301] lstrlenW (lpString=".ppt") returned 4
	[0040.301] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104
	[0040.301] lstrlenW (lpString=".zip") returned 4
	[0040.301] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.301] lstrlenW (lpString=".rar") returned 4
	[0040.301] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.301] lstrlenW (lpString=".bz2") returned 4
	[0040.301] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.301] lstrlenW (lpString=".7z") returned 3
	[0040.301] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104
	[0040.301] lstrlenW (lpString=".dbf") returned 4
	[0040.301] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104
	[0040.301] lstrlenW (lpString=".1cd") returned 4
	[0040.302] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104
	[0040.302] lstrlenW (lpString=".jpg") returned 4
	[0040.302] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104
	[0040.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104
	[0040.302] lstrlenW (lpString=".doc") returned 4
	[0040.302] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.302] lstrlenW (lpString=".docx") returned 5
	[0040.302] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0040.302] lstrlenW (lpString=".pdf") returned 4
	[0040.302] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.302] lstrlenW (lpString=".xls") returned 4
	[0040.302] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.302] lstrlenW (lpString=".xlsx") returned 5
	[0040.302] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0040.302] lstrlenW (lpString=".ppt") returned 4
	[0040.302] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104
	[0040.302] lstrlenW (lpString=".zip") returned 4
	[0040.302] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.302] lstrlenW (lpString=".rar") returned 4
	[0040.302] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.302] lstrlenW (lpString=".bz2") returned 4
	[0040.303] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.303] lstrlenW (lpString=".7z") returned 3
	[0040.303] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104
	[0040.303] lstrlenW (lpString=".dbf") returned 4
	[0040.303] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104
	[0040.303] lstrlenW (lpString=".1cd") returned 4
	[0040.303] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML") returned 104
	[0040.303] lstrlenW (lpString=".jpg") returned 4
	[0040.303] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.303] lstrcmpiW (lpString1=".CHM", lpString2=".beets") returned 1
	[0040.303] lstrlenW (lpString="OCT.CHM") returned 7
	[0040.303] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0040.340] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=71236) returned 1
	[0040.340] CloseHandle (hObject=0x1e8) returned 1
	[0040.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm")) returned 0x20
	[0040.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.399] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0040.400] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.400] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.400] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0040.409] GetLastError () returned 0x0
	[0040.409] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x11644, lpOverlapped=0x0) returned 1
	[0040.892] WriteFile (in: hFile=0x1ac, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x11650, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x11650, lpOverlapped=0x0) returned 1
	[0040.894] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.894] WriteFile (in: hFile=0x1ac, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe2, lpOverlapped=0x0) returned 1
	[0040.894] SetEndOfFile (hFile=0x1ac) returned 1
	[0040.894] CloseHandle (hObject=0x1ac) returned 1
	[0040.895] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.895] SetEndOfFile (hFile=0x1e8) returned 1
	[0040.897] CloseHandle (hObject=0x1e8) returned 1
	[0040.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.897] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm")) returned 1
	[0040.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0040.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0040.945] lstrlenW (lpString=".doc") returned 4
	[0040.945] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0040.945] lstrlenW (lpString=".docx") returned 5
	[0040.945] lstrcmpiW (lpString1=".docx", lpString2="T.CHM") returned -1
	[0040.945] lstrlenW (lpString=".pdf") returned 4
	[0040.945] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0040.945] lstrlenW (lpString=".xls") returned 4
	[0040.945] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0040.945] lstrlenW (lpString=".xlsx") returned 5
	[0040.945] lstrcmpiW (lpString1=".xlsx", lpString2="T.CHM") returned -1
	[0040.945] lstrlenW (lpString=".ppt") returned 4
	[0040.945] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0040.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0040.945] lstrlenW (lpString=".zip") returned 4
	[0040.945] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0040.945] lstrlenW (lpString=".rar") returned 4
	[0040.945] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0040.945] lstrlenW (lpString=".bz2") returned 4
	[0040.945] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0040.945] lstrlenW (lpString=".7z") returned 3
	[0040.945] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0040.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0040.945] lstrlenW (lpString=".dbf") returned 4
	[0040.945] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0040.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0040.945] lstrlenW (lpString=".1cd") returned 4
	[0040.945] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0040.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0040.945] lstrlenW (lpString=".jpg") returned 4
	[0040.945] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0040.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0040.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0040.946] lstrlenW (lpString=".doc") returned 4
	[0040.946] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0040.946] lstrlenW (lpString=".docx") returned 5
	[0040.946] lstrcmpiW (lpString1=".docx", lpString2="T.CHM") returned -1
	[0040.946] lstrlenW (lpString=".pdf") returned 4
	[0040.946] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0040.946] lstrlenW (lpString=".xls") returned 4
	[0040.946] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0040.946] lstrlenW (lpString=".xlsx") returned 5
	[0040.946] lstrcmpiW (lpString1=".xlsx", lpString2="T.CHM") returned -1
	[0040.946] lstrlenW (lpString=".ppt") returned 4
	[0040.946] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0040.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0040.946] lstrlenW (lpString=".zip") returned 4
	[0040.946] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0040.946] lstrlenW (lpString=".rar") returned 4
	[0040.946] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0040.946] lstrlenW (lpString=".bz2") returned 4
	[0040.946] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0040.946] lstrlenW (lpString=".7z") returned 3
	[0040.946] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0040.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0040.946] lstrlenW (lpString=".dbf") returned 4
	[0040.946] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0040.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0040.946] lstrlenW (lpString=".1cd") returned 4
	[0040.946] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0040.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM") returned 100
	[0040.946] lstrlenW (lpString=".jpg") returned 4
	[0040.946] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0040.947] lstrcmpiW (lpString1=".CHM", lpString2=".beets") returned 1
	[0040.947] lstrlenW (lpString="SETUP.CHM") returned 9
	[0040.947] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0041.257] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=67190) returned 1
	[0041.257] CloseHandle (hObject=0x1f8) returned 1
	[0041.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm")) returned 0x20
	[0041.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.258] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0041.258] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.258] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.258] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0041.258] GetLastError () returned 0x0
	[0041.258] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x10676, lpOverlapped=0x0) returned 1
	[0041.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x10680, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x10680, lpOverlapped=0x0) returned 1
	[0041.337] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0041.337] SetEndOfFile (hFile=0x1ec) returned 1
	[0041.337] CloseHandle (hObject=0x1ec) returned 1
	[0041.339] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.339] SetEndOfFile (hFile=0x1f8) returned 1
	[0041.341] CloseHandle (hObject=0x1f8) returned 1
	[0041.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.342] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm")) returned 1
	[0041.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102
	[0041.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102
	[0041.342] lstrlenW (lpString=".doc") returned 4
	[0041.343] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0041.343] lstrlenW (lpString=".docx") returned 5
	[0041.343] lstrcmpiW (lpString1=".docx", lpString2="P.CHM") returned -1
	[0041.343] lstrlenW (lpString=".pdf") returned 4
	[0041.343] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0041.343] lstrlenW (lpString=".xls") returned 4
	[0041.343] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0041.343] lstrlenW (lpString=".xlsx") returned 5
	[0041.343] lstrcmpiW (lpString1=".xlsx", lpString2="P.CHM") returned -1
	[0041.343] lstrlenW (lpString=".ppt") returned 4
	[0041.343] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0041.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102
	[0041.343] lstrlenW (lpString=".zip") returned 4
	[0041.343] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0041.343] lstrlenW (lpString=".rar") returned 4
	[0041.343] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0041.343] lstrlenW (lpString=".bz2") returned 4
	[0041.343] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0041.343] lstrlenW (lpString=".7z") returned 3
	[0041.343] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0041.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102
	[0041.343] lstrlenW (lpString=".dbf") returned 4
	[0041.343] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0041.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102
	[0041.343] lstrlenW (lpString=".1cd") returned 4
	[0041.343] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0041.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102
	[0041.343] lstrlenW (lpString=".jpg") returned 4
	[0041.343] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0041.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102
	[0041.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102
	[0041.344] lstrlenW (lpString=".doc") returned 4
	[0041.344] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0041.344] lstrlenW (lpString=".docx") returned 5
	[0041.344] lstrcmpiW (lpString1=".docx", lpString2="P.CHM") returned -1
	[0041.344] lstrlenW (lpString=".pdf") returned 4
	[0041.344] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0041.344] lstrlenW (lpString=".xls") returned 4
	[0041.344] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0041.344] lstrlenW (lpString=".xlsx") returned 5
	[0041.344] lstrcmpiW (lpString1=".xlsx", lpString2="P.CHM") returned -1
	[0041.344] lstrlenW (lpString=".ppt") returned 4
	[0041.344] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0041.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102
	[0041.344] lstrlenW (lpString=".zip") returned 4
	[0041.344] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0041.344] lstrlenW (lpString=".rar") returned 4
	[0041.344] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0041.344] lstrlenW (lpString=".bz2") returned 4
	[0041.344] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0041.344] lstrlenW (lpString=".7z") returned 3
	[0041.344] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0041.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102
	[0041.344] lstrlenW (lpString=".dbf") returned 4
	[0041.344] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0041.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102
	[0041.344] lstrlenW (lpString=".1cd") returned 4
	[0041.344] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0041.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM") returned 102
	[0041.344] lstrlenW (lpString=".jpg") returned 4
	[0041.344] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0041.345] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.345] lstrlenW (lpString="PrjProrWW.XML") returned 13
	[0041.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.439] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=6421) returned 1
	[0041.439] CloseHandle (hObject=0x200) returned 1
	[0041.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml")) returned 0x20
	[0041.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.439] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.439] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.439] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.439] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0041.440] GetLastError () returned 0x0
	[0041.440] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x1915, lpOverlapped=0x0) returned 1
	[0041.442] WriteFile (in: hFile=0x19c, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x1920, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x1920, lpOverlapped=0x0) returned 1
	[0041.442] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.443] WriteFile (in: hFile=0x19c, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xee, lpOverlapped=0x0) returned 1
	[0041.443] SetEndOfFile (hFile=0x19c) returned 1
	[0041.443] CloseHandle (hObject=0x19c) returned 1
	[0041.444] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.444] SetEndOfFile (hFile=0x200) returned 1
	[0041.444] CloseHandle (hObject=0x200) returned 1
	[0041.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.445] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml")) returned 1
	[0041.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0041.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0041.445] lstrlenW (lpString=".doc") returned 4
	[0041.445] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.445] lstrlenW (lpString=".docx") returned 5
	[0041.445] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1
	[0041.445] lstrlenW (lpString=".pdf") returned 4
	[0041.445] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.445] lstrlenW (lpString=".xls") returned 4
	[0041.445] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.445] lstrlenW (lpString=".xlsx") returned 5
	[0041.445] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1
	[0041.445] lstrlenW (lpString=".ppt") returned 4
	[0041.445] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0041.445] lstrlenW (lpString=".zip") returned 4
	[0041.445] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.445] lstrlenW (lpString=".rar") returned 4
	[0041.445] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.445] lstrlenW (lpString=".bz2") returned 4
	[0041.445] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.445] lstrlenW (lpString=".7z") returned 3
	[0041.446] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0041.446] lstrlenW (lpString=".dbf") returned 4
	[0041.446] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0041.446] lstrlenW (lpString=".1cd") returned 4
	[0041.446] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0041.446] lstrlenW (lpString=".jpg") returned 4
	[0041.446] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0041.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0041.446] lstrlenW (lpString=".doc") returned 4
	[0041.446] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.446] lstrlenW (lpString=".docx") returned 5
	[0041.446] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1
	[0041.446] lstrlenW (lpString=".pdf") returned 4
	[0041.446] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.446] lstrlenW (lpString=".xls") returned 4
	[0041.446] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.446] lstrlenW (lpString=".xlsx") returned 5
	[0041.446] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1
	[0041.446] lstrlenW (lpString=".ppt") returned 4
	[0041.446] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.446] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0041.446] lstrlenW (lpString=".zip") returned 4
	[0041.446] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.446] lstrlenW (lpString=".rar") returned 4
	[0041.446] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.446] lstrlenW (lpString=".bz2") returned 4
	[0041.446] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.446] lstrlenW (lpString=".7z") returned 3
	[0041.447] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.447] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0041.447] lstrlenW (lpString=".dbf") returned 4
	[0041.447] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.447] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0041.447] lstrlenW (lpString=".1cd") returned 4
	[0041.447] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.447] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML") returned 101
	[0041.447] lstrlenW (lpString=".jpg") returned 4
	[0041.447] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.447] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.447] lstrlenW (lpString="ProjectMUI.XML") returned 14
	[0041.447] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.447] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1452) returned 1
	[0041.447] CloseHandle (hObject=0x200) returned 1
	[0041.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml")) returned 0x20
	[0041.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.448] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.448] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.448] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.448] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0041.453] GetLastError () returned 0x0
	[0041.453] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x5ac, lpOverlapped=0x0) returned 1
	[0041.455] WriteFile (in: hFile=0x1f4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x5b0, lpOverlapped=0x0) returned 1
	[0041.456] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.456] WriteFile (in: hFile=0x1f4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xf0, lpOverlapped=0x0) returned 1
	[0041.456] SetEndOfFile (hFile=0x1f4) returned 1
	[0041.456] CloseHandle (hObject=0x1f4) returned 1
	[0041.808] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.808] SetEndOfFile (hFile=0x200) returned 1
	[0041.809] CloseHandle (hObject=0x200) returned 1
	[0041.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.809] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml")) returned 1
	[0041.809] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0041.809] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0041.809] lstrlenW (lpString=".doc") returned 4
	[0041.809] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.809] lstrlenW (lpString=".docx") returned 5
	[0041.809] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0041.809] lstrlenW (lpString=".pdf") returned 4
	[0041.809] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.810] lstrlenW (lpString=".xls") returned 4
	[0041.810] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.810] lstrlenW (lpString=".xlsx") returned 5
	[0041.810] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0041.810] lstrlenW (lpString=".ppt") returned 4
	[0041.810] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.810] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0041.810] lstrlenW (lpString=".zip") returned 4
	[0041.810] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.810] lstrlenW (lpString=".rar") returned 4
	[0041.810] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.810] lstrlenW (lpString=".bz2") returned 4
	[0041.810] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.810] lstrlenW (lpString=".7z") returned 3
	[0041.810] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.810] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0041.810] lstrlenW (lpString=".dbf") returned 4
	[0041.810] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.810] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0041.810] lstrlenW (lpString=".1cd") returned 4
	[0041.810] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.810] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0041.810] lstrlenW (lpString=".jpg") returned 4
	[0041.810] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.810] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0041.810] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0041.810] lstrlenW (lpString=".doc") returned 4
	[0041.810] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.810] lstrlenW (lpString=".docx") returned 5
	[0041.810] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0041.810] lstrlenW (lpString=".pdf") returned 4
	[0041.810] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.810] lstrlenW (lpString=".xls") returned 4
	[0041.810] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.811] lstrlenW (lpString=".xlsx") returned 5
	[0041.811] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0041.811] lstrlenW (lpString=".ppt") returned 4
	[0041.811] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.811] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0041.811] lstrlenW (lpString=".zip") returned 4
	[0041.811] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.811] lstrlenW (lpString=".rar") returned 4
	[0041.811] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.811] lstrlenW (lpString=".bz2") returned 4
	[0041.811] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.811] lstrlenW (lpString=".7z") returned 3
	[0041.811] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.811] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0041.811] lstrlenW (lpString=".dbf") returned 4
	[0041.811] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.811] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0041.811] lstrlenW (lpString=".1cd") returned 4
	[0041.811] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.811] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML") returned 108
	[0041.811] lstrlenW (lpString=".jpg") returned 4
	[0041.811] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.811] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.811] lstrlenW (lpString="Proof.XML") returned 9
	[0041.811] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.812] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1347) returned 1
	[0041.812] CloseHandle (hObject=0x200) returned 1
	[0041.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml")) returned 0x20
	[0041.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.812] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.812] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0041.813] GetLastError () returned 0x0
	[0041.813] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x543, lpOverlapped=0x0) returned 1
	[0041.814] WriteFile (in: hFile=0x1f4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x550, lpOverlapped=0x0) returned 1
	[0041.815] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.815] WriteFile (in: hFile=0x1f4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0041.815] SetEndOfFile (hFile=0x1f4) returned 1
	[0041.815] CloseHandle (hObject=0x1f4) returned 1
	[0041.816] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.816] SetEndOfFile (hFile=0x200) returned 1
	[0041.817] CloseHandle (hObject=0x200) returned 1
	[0041.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.817] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml")) returned 1
	[0041.817] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98
	[0041.818] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98
	[0041.818] lstrlenW (lpString=".doc") returned 4
	[0041.818] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.818] lstrlenW (lpString=".docx") returned 5
	[0041.818] lstrcmpiW (lpString1=".docx", lpString2="f.XML") returned -1
	[0041.818] lstrlenW (lpString=".pdf") returned 4
	[0041.818] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.818] lstrlenW (lpString=".xls") returned 4
	[0041.818] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.818] lstrlenW (lpString=".xlsx") returned 5
	[0041.818] lstrcmpiW (lpString1=".xlsx", lpString2="f.XML") returned -1
	[0041.818] lstrlenW (lpString=".ppt") returned 4
	[0041.818] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.818] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98
	[0041.818] lstrlenW (lpString=".zip") returned 4
	[0041.818] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.818] lstrlenW (lpString=".rar") returned 4
	[0041.818] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.818] lstrlenW (lpString=".bz2") returned 4
	[0041.818] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.818] lstrlenW (lpString=".7z") returned 3
	[0041.818] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.818] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98
	[0041.818] lstrlenW (lpString=".dbf") returned 4
	[0041.818] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.818] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98
	[0041.818] lstrlenW (lpString=".1cd") returned 4
	[0041.818] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.818] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98
	[0041.818] lstrlenW (lpString=".jpg") returned 4
	[0041.818] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.818] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98
	[0041.818] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98
	[0041.819] lstrlenW (lpString=".doc") returned 4
	[0041.819] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.819] lstrlenW (lpString=".docx") returned 5
	[0041.819] lstrcmpiW (lpString1=".docx", lpString2="f.XML") returned -1
	[0041.819] lstrlenW (lpString=".pdf") returned 4
	[0041.819] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.819] lstrlenW (lpString=".xls") returned 4
	[0041.819] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.819] lstrlenW (lpString=".xlsx") returned 5
	[0041.819] lstrcmpiW (lpString1=".xlsx", lpString2="f.XML") returned -1
	[0041.819] lstrlenW (lpString=".ppt") returned 4
	[0041.819] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.819] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98
	[0041.819] lstrlenW (lpString=".zip") returned 4
	[0041.819] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.819] lstrlenW (lpString=".rar") returned 4
	[0041.819] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.819] lstrlenW (lpString=".bz2") returned 4
	[0041.819] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.819] lstrlenW (lpString=".7z") returned 3
	[0041.819] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.819] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98
	[0041.819] lstrlenW (lpString=".dbf") returned 4
	[0041.819] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.819] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98
	[0041.819] lstrlenW (lpString=".1cd") returned 4
	[0041.819] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.819] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML") returned 98
	[0041.819] lstrlenW (lpString=".jpg") returned 4
	[0041.819] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.820] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.820] lstrlenW (lpString="Proof.XML") returned 9
	[0041.820] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.820] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1457) returned 1
	[0041.820] CloseHandle (hObject=0x200) returned 1
	[0041.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml")) returned 0x20
	[0041.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.821] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.821] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.821] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.821] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0041.821] GetLastError () returned 0x0
	[0041.821] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x5b1, lpOverlapped=0x0) returned 1
	[0041.823] WriteFile (in: hFile=0x1f4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x5c0, lpOverlapped=0x0) returned 1
	[0041.824] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.824] WriteFile (in: hFile=0x1f4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0041.824] SetEndOfFile (hFile=0x1f4) returned 1
	[0041.824] CloseHandle (hObject=0x1f4) returned 1
	[0041.825] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.825] SetEndOfFile (hFile=0x200) returned 1
	[0041.825] CloseHandle (hObject=0x200) returned 1
	[0041.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.826] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml")) returned 1
	[0041.826] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98
	[0041.826] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98
	[0041.826] lstrlenW (lpString=".doc") returned 4
	[0041.826] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.826] lstrlenW (lpString=".docx") returned 5
	[0041.826] lstrcmpiW (lpString1=".docx", lpString2="f.XML") returned -1
	[0041.826] lstrlenW (lpString=".pdf") returned 4
	[0041.826] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.826] lstrlenW (lpString=".xls") returned 4
	[0041.826] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.826] lstrlenW (lpString=".xlsx") returned 5
	[0041.826] lstrcmpiW (lpString1=".xlsx", lpString2="f.XML") returned -1
	[0041.826] lstrlenW (lpString=".ppt") returned 4
	[0041.826] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.826] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98
	[0041.826] lstrlenW (lpString=".zip") returned 4
	[0041.826] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.826] lstrlenW (lpString=".rar") returned 4
	[0041.826] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.826] lstrlenW (lpString=".bz2") returned 4
	[0041.826] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.826] lstrlenW (lpString=".7z") returned 3
	[0041.826] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.826] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98
	[0041.827] lstrlenW (lpString=".dbf") returned 4
	[0041.827] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.827] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98
	[0041.827] lstrlenW (lpString=".1cd") returned 4
	[0041.827] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.827] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98
	[0041.827] lstrlenW (lpString=".jpg") returned 4
	[0041.827] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.827] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98
	[0041.827] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98
	[0041.827] lstrlenW (lpString=".doc") returned 4
	[0041.827] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.827] lstrlenW (lpString=".docx") returned 5
	[0041.827] lstrcmpiW (lpString1=".docx", lpString2="f.XML") returned -1
	[0041.827] lstrlenW (lpString=".pdf") returned 4
	[0041.827] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.827] lstrlenW (lpString=".xls") returned 4
	[0041.827] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.827] lstrlenW (lpString=".xlsx") returned 5
	[0041.827] lstrcmpiW (lpString1=".xlsx", lpString2="f.XML") returned -1
	[0041.827] lstrlenW (lpString=".ppt") returned 4
	[0041.827] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.827] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98
	[0041.827] lstrlenW (lpString=".zip") returned 4
	[0041.827] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.827] lstrlenW (lpString=".rar") returned 4
	[0041.827] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.827] lstrlenW (lpString=".bz2") returned 4
	[0041.827] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.827] lstrlenW (lpString=".7z") returned 3
	[0041.827] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.827] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98
	[0041.827] lstrlenW (lpString=".dbf") returned 4
	[0041.828] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98
	[0041.828] lstrlenW (lpString=".1cd") returned 4
	[0041.828] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML") returned 98
	[0041.828] lstrlenW (lpString=".jpg") returned 4
	[0041.828] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.828] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.828] lstrlenW (lpString="Proof.XML") returned 9
	[0041.828] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.828] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1458) returned 1
	[0041.828] CloseHandle (hObject=0x200) returned 1
	[0041.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml")) returned 0x20
	[0041.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.829] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.829] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.829] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.829] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0041.830] GetLastError () returned 0x0
	[0041.830] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x5b2, lpOverlapped=0x0) returned 1
	[0041.831] WriteFile (in: hFile=0x1f4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x5c0, lpOverlapped=0x0) returned 1
	[0041.832] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.832] WriteFile (in: hFile=0x1f4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0041.832] SetEndOfFile (hFile=0x1f4) returned 1
	[0041.832] CloseHandle (hObject=0x1f4) returned 1
	[0041.833] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.833] SetEndOfFile (hFile=0x200) returned 1
	[0041.834] CloseHandle (hObject=0x200) returned 1
	[0041.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.834] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml")) returned 1
	[0041.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98
	[0041.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98
	[0041.834] lstrlenW (lpString=".doc") returned 4
	[0041.834] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.834] lstrlenW (lpString=".docx") returned 5
	[0041.834] lstrcmpiW (lpString1=".docx", lpString2="f.XML") returned -1
	[0041.834] lstrlenW (lpString=".pdf") returned 4
	[0041.834] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.835] lstrlenW (lpString=".xls") returned 4
	[0041.835] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.835] lstrlenW (lpString=".xlsx") returned 5
	[0041.835] lstrcmpiW (lpString1=".xlsx", lpString2="f.XML") returned -1
	[0041.835] lstrlenW (lpString=".ppt") returned 4
	[0041.835] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98
	[0041.835] lstrlenW (lpString=".zip") returned 4
	[0041.835] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.835] lstrlenW (lpString=".rar") returned 4
	[0041.835] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.835] lstrlenW (lpString=".bz2") returned 4
	[0041.835] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.835] lstrlenW (lpString=".7z") returned 3
	[0041.835] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98
	[0041.835] lstrlenW (lpString=".dbf") returned 4
	[0041.835] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98
	[0041.835] lstrlenW (lpString=".1cd") returned 4
	[0041.835] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98
	[0041.835] lstrlenW (lpString=".jpg") returned 4
	[0041.835] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98
	[0041.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98
	[0041.835] lstrlenW (lpString=".doc") returned 4
	[0041.835] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.835] lstrlenW (lpString=".docx") returned 5
	[0041.835] lstrcmpiW (lpString1=".docx", lpString2="f.XML") returned -1
	[0041.835] lstrlenW (lpString=".pdf") returned 4
	[0041.835] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.835] lstrlenW (lpString=".xls") returned 4
	[0041.836] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.836] lstrlenW (lpString=".xlsx") returned 5
	[0041.836] lstrcmpiW (lpString1=".xlsx", lpString2="f.XML") returned -1
	[0041.836] lstrlenW (lpString=".ppt") returned 4
	[0041.836] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98
	[0041.836] lstrlenW (lpString=".zip") returned 4
	[0041.836] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.836] lstrlenW (lpString=".rar") returned 4
	[0041.836] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.836] lstrlenW (lpString=".bz2") returned 4
	[0041.836] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.836] lstrlenW (lpString=".7z") returned 3
	[0041.836] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98
	[0041.836] lstrlenW (lpString=".dbf") returned 4
	[0041.836] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98
	[0041.836] lstrlenW (lpString=".1cd") returned 4
	[0041.836] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML") returned 98
	[0041.836] lstrlenW (lpString=".jpg") returned 4
	[0041.836] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.836] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.836] lstrlenW (lpString="Proofing.XML") returned 12
	[0041.836] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.837] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=811) returned 1
	[0041.837] CloseHandle (hObject=0x200) returned 1
	[0041.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml")) returned 0x20
	[0041.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.838] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.838] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.838] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.838] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0041.838] GetLastError () returned 0x0
	[0041.838] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x32b, lpOverlapped=0x0) returned 1
	[0041.840] WriteFile (in: hFile=0x1f4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x330, lpOverlapped=0x0) returned 1
	[0041.840] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.841] WriteFile (in: hFile=0x1f4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0041.841] SetEndOfFile (hFile=0x1f4) returned 1
	[0041.841] CloseHandle (hObject=0x1f4) returned 1
	[0041.841] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.841] SetEndOfFile (hFile=0x200) returned 1
	[0041.842] CloseHandle (hObject=0x200) returned 1
	[0041.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.842] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml")) returned 1
	[0041.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0041.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0041.843] lstrlenW (lpString=".doc") returned 4
	[0041.843] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.843] lstrlenW (lpString=".docx") returned 5
	[0041.843] lstrcmpiW (lpString1=".docx", lpString2="g.XML") returned -1
	[0041.843] lstrlenW (lpString=".pdf") returned 4
	[0041.843] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.843] lstrlenW (lpString=".xls") returned 4
	[0041.843] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.843] lstrlenW (lpString=".xlsx") returned 5
	[0041.843] lstrcmpiW (lpString1=".xlsx", lpString2="g.XML") returned -1
	[0041.843] lstrlenW (lpString=".ppt") returned 4
	[0041.843] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0041.843] lstrlenW (lpString=".zip") returned 4
	[0041.843] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.843] lstrlenW (lpString=".rar") returned 4
	[0041.843] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.843] lstrlenW (lpString=".bz2") returned 4
	[0041.843] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.843] lstrlenW (lpString=".7z") returned 3
	[0041.843] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0041.843] lstrlenW (lpString=".dbf") returned 4
	[0041.843] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0041.843] lstrlenW (lpString=".1cd") returned 4
	[0041.843] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0041.844] lstrlenW (lpString=".jpg") returned 4
	[0041.844] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0041.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0041.844] lstrlenW (lpString=".doc") returned 4
	[0041.844] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.844] lstrlenW (lpString=".docx") returned 5
	[0041.844] lstrcmpiW (lpString1=".docx", lpString2="g.XML") returned -1
	[0041.844] lstrlenW (lpString=".pdf") returned 4
	[0041.844] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.844] lstrlenW (lpString=".xls") returned 4
	[0041.844] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.844] lstrlenW (lpString=".xlsx") returned 5
	[0041.844] lstrcmpiW (lpString1=".xlsx", lpString2="g.XML") returned -1
	[0041.844] lstrlenW (lpString=".ppt") returned 4
	[0041.844] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0041.844] lstrlenW (lpString=".zip") returned 4
	[0041.844] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.844] lstrlenW (lpString=".rar") returned 4
	[0041.844] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.844] lstrlenW (lpString=".bz2") returned 4
	[0041.844] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.844] lstrlenW (lpString=".7z") returned 3
	[0041.844] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0041.844] lstrlenW (lpString=".dbf") returned 4
	[0041.844] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0041.844] lstrlenW (lpString=".1cd") returned 4
	[0041.844] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML") returned 107
	[0041.845] lstrlenW (lpString=".jpg") returned 4
	[0041.845] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.845] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.845] lstrlenW (lpString="SETUP.XML") returned 9
	[0041.845] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.845] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=5884) returned 1
	[0041.845] CloseHandle (hObject=0x200) returned 1
	[0041.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml")) returned 0x20
	[0041.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.845] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.845] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.845] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.846] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0042.102] GetLastError () returned 0x0
	[0042.102] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x16fc, lpOverlapped=0x0) returned 1
	[0042.108] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x1700, lpOverlapped=0x0) returned 1
	[0042.109] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0042.109] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0042.109] SetEndOfFile (hFile=0x1bc) returned 1
	[0042.109] CloseHandle (hObject=0x1bc) returned 1
	[0042.112] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.112] SetEndOfFile (hFile=0x200) returned 1
	[0042.113] CloseHandle (hObject=0x200) returned 1
	[0042.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0042.113] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml")) returned 1
	[0042.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104
	[0042.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104
	[0042.113] lstrlenW (lpString=".doc") returned 4
	[0042.113] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0042.113] lstrlenW (lpString=".docx") returned 5
	[0042.113] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0042.113] lstrlenW (lpString=".pdf") returned 4
	[0042.113] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0042.113] lstrlenW (lpString=".xls") returned 4
	[0042.113] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0042.113] lstrlenW (lpString=".xlsx") returned 5
	[0042.113] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0042.113] lstrlenW (lpString=".ppt") returned 4
	[0042.113] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0042.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104
	[0042.114] lstrlenW (lpString=".zip") returned 4
	[0042.114] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0042.114] lstrlenW (lpString=".rar") returned 4
	[0042.114] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0042.114] lstrlenW (lpString=".bz2") returned 4
	[0042.114] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0042.114] lstrlenW (lpString=".7z") returned 3
	[0042.114] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0042.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104
	[0042.114] lstrlenW (lpString=".dbf") returned 4
	[0042.114] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0042.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104
	[0042.114] lstrlenW (lpString=".1cd") returned 4
	[0042.114] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0042.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104
	[0042.114] lstrlenW (lpString=".jpg") returned 4
	[0042.114] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0042.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104
	[0042.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104
	[0042.114] lstrlenW (lpString=".doc") returned 4
	[0042.114] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0042.114] lstrlenW (lpString=".docx") returned 5
	[0042.114] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0042.114] lstrlenW (lpString=".pdf") returned 4
	[0042.114] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0042.114] lstrlenW (lpString=".xls") returned 4
	[0042.114] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0042.114] lstrlenW (lpString=".xlsx") returned 5
	[0042.114] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0042.114] lstrlenW (lpString=".ppt") returned 4
	[0042.114] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0042.114] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104
	[0042.115] lstrlenW (lpString=".zip") returned 4
	[0042.115] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0042.115] lstrlenW (lpString=".rar") returned 4
	[0042.115] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0042.115] lstrlenW (lpString=".bz2") returned 4
	[0042.115] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0042.115] lstrlenW (lpString=".7z") returned 3
	[0042.115] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0042.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104
	[0042.115] lstrlenW (lpString=".dbf") returned 4
	[0042.115] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0042.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104
	[0042.115] lstrlenW (lpString=".1cd") returned 4
	[0042.115] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0042.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML") returned 104
	[0042.115] lstrlenW (lpString=".jpg") returned 4
	[0042.115] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0042.115] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0042.115] lstrlenW (lpString="SETUP.XML") returned 9
	[0042.115] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0042.115] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=31094) returned 1
	[0042.116] CloseHandle (hObject=0x200) returned 1
	[0042.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml")) returned 0x20
	[0042.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0042.116] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0042.116] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.116] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.116] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0042.119] GetLastError () returned 0x0
	[0042.119] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x7976, lpOverlapped=0x0) returned 1
	[0042.121] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x7980, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x7980, lpOverlapped=0x0) returned 1
	[0042.123] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0042.123] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0042.123] SetEndOfFile (hFile=0x1bc) returned 1
	[0042.123] CloseHandle (hObject=0x1bc) returned 1
	[0042.124] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.124] SetEndOfFile (hFile=0x200) returned 1
	[0042.125] CloseHandle (hObject=0x200) returned 1
	[0042.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0042.125] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml")) returned 1
	[0042.125] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98
	[0042.125] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98
	[0042.125] lstrlenW (lpString=".doc") returned 4
	[0042.125] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0042.125] lstrlenW (lpString=".docx") returned 5
	[0042.125] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0042.125] lstrlenW (lpString=".pdf") returned 4
	[0042.125] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0042.125] lstrlenW (lpString=".xls") returned 4
	[0042.126] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0042.126] lstrlenW (lpString=".xlsx") returned 5
	[0042.126] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0042.126] lstrlenW (lpString=".ppt") returned 4
	[0042.126] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0042.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98
	[0042.126] lstrlenW (lpString=".zip") returned 4
	[0042.126] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0042.126] lstrlenW (lpString=".rar") returned 4
	[0042.126] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0042.126] lstrlenW (lpString=".bz2") returned 4
	[0042.126] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0042.126] lstrlenW (lpString=".7z") returned 3
	[0042.126] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0042.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98
	[0042.126] lstrlenW (lpString=".dbf") returned 4
	[0042.126] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0042.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98
	[0042.126] lstrlenW (lpString=".1cd") returned 4
	[0042.126] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0042.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98
	[0042.126] lstrlenW (lpString=".jpg") returned 4
	[0042.126] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0042.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98
	[0042.126] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98
	[0042.126] lstrlenW (lpString=".doc") returned 4
	[0042.126] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0042.126] lstrlenW (lpString=".docx") returned 5
	[0042.126] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0042.126] lstrlenW (lpString=".pdf") returned 4
	[0042.126] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0042.126] lstrlenW (lpString=".xls") returned 4
	[0042.127] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0042.127] lstrlenW (lpString=".xlsx") returned 5
	[0042.127] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0042.127] lstrlenW (lpString=".ppt") returned 4
	[0042.127] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0042.127] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98
	[0042.127] lstrlenW (lpString=".zip") returned 4
	[0042.127] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0042.127] lstrlenW (lpString=".rar") returned 4
	[0042.127] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0042.127] lstrlenW (lpString=".bz2") returned 4
	[0042.127] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0042.127] lstrlenW (lpString=".7z") returned 3
	[0042.127] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0042.127] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98
	[0042.127] lstrlenW (lpString=".dbf") returned 4
	[0042.127] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0042.127] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98
	[0042.127] lstrlenW (lpString=".1cd") returned 4
	[0042.127] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0042.127] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML") returned 98
	[0042.127] lstrlenW (lpString=".jpg") returned 4
	[0042.127] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0042.127] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0042.127] lstrlenW (lpString="PublisherMUI.XML") returned 16
	[0042.128] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0042.128] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1450) returned 1
	[0042.128] CloseHandle (hObject=0x200) returned 1
	[0042.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml")) returned 0x20
	[0042.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0042.128] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0042.128] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.128] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.128] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0042.130] GetLastError () returned 0x0
	[0042.130] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x5aa, lpOverlapped=0x0) returned 1
	[0042.132] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x5b0, lpOverlapped=0x0) returned 1
	[0042.133] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0042.133] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xf4, lpOverlapped=0x0) returned 1
	[0042.133] SetEndOfFile (hFile=0x1bc) returned 1
	[0042.133] CloseHandle (hObject=0x1bc) returned 1
	[0042.136] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.136] SetEndOfFile (hFile=0x200) returned 1
	[0042.137] CloseHandle (hObject=0x200) returned 1
	[0042.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0042.137] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml")) returned 1
	[0042.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0042.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0042.137] lstrlenW (lpString=".doc") returned 4
	[0042.137] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0042.137] lstrlenW (lpString=".docx") returned 5
	[0042.137] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0042.137] lstrlenW (lpString=".pdf") returned 4
	[0042.137] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0042.137] lstrlenW (lpString=".xls") returned 4
	[0042.137] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0042.137] lstrlenW (lpString=".xlsx") returned 5
	[0042.137] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0042.137] lstrlenW (lpString=".ppt") returned 4
	[0042.138] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0042.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0042.138] lstrlenW (lpString=".zip") returned 4
	[0042.138] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0042.138] lstrlenW (lpString=".rar") returned 4
	[0042.138] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0042.138] lstrlenW (lpString=".bz2") returned 4
	[0042.138] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0042.138] lstrlenW (lpString=".7z") returned 3
	[0042.138] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0042.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0042.138] lstrlenW (lpString=".dbf") returned 4
	[0042.138] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0042.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0042.138] lstrlenW (lpString=".1cd") returned 4
	[0042.138] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0042.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0042.138] lstrlenW (lpString=".jpg") returned 4
	[0042.138] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0042.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0042.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0042.138] lstrlenW (lpString=".doc") returned 4
	[0042.138] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0042.138] lstrlenW (lpString=".docx") returned 5
	[0042.138] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0042.138] lstrlenW (lpString=".pdf") returned 4
	[0042.138] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0042.138] lstrlenW (lpString=".xls") returned 4
	[0042.138] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0042.138] lstrlenW (lpString=".xlsx") returned 5
	[0042.138] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0042.138] lstrlenW (lpString=".ppt") returned 4
	[0042.138] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0042.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0042.139] lstrlenW (lpString=".zip") returned 4
	[0042.139] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0042.139] lstrlenW (lpString=".rar") returned 4
	[0042.139] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0042.139] lstrlenW (lpString=".bz2") returned 4
	[0042.139] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0042.139] lstrlenW (lpString=".7z") returned 3
	[0042.139] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0042.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0042.139] lstrlenW (lpString=".dbf") returned 4
	[0042.139] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0042.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0042.139] lstrlenW (lpString=".1cd") returned 4
	[0042.139] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0042.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML") returned 112
	[0042.139] lstrlenW (lpString=".jpg") returned 4
	[0042.139] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0042.139] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0042.139] lstrlenW (lpString="SETUP.XML") returned 9
	[0042.139] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0042.142] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1608) returned 1
	[0042.142] CloseHandle (hObject=0x200) returned 1
	[0042.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml")) returned 0x20
	[0042.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0042.142] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0042.142] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.142] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.142] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0042.142] GetLastError () returned 0x0
	[0042.142] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x648, lpOverlapped=0x0) returned 1
	[0042.145] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x650, lpOverlapped=0x0) returned 1
	[0042.145] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0042.146] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0042.146] SetEndOfFile (hFile=0x1bc) returned 1
	[0042.146] CloseHandle (hObject=0x1bc) returned 1
	[0042.147] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.147] SetEndOfFile (hFile=0x200) returned 1
	[0042.147] CloseHandle (hObject=0x200) returned 1
	[0042.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0042.148] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml")) returned 1
	[0042.148] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105
	[0042.148] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105
	[0042.148] lstrlenW (lpString=".doc") returned 4
	[0042.148] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0042.148] lstrlenW (lpString=".docx") returned 5
	[0042.148] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0042.148] lstrlenW (lpString=".pdf") returned 4
	[0042.148] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0042.148] lstrlenW (lpString=".xls") returned 4
	[0042.148] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0042.148] lstrlenW (lpString=".xlsx") returned 5
	[0042.148] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0042.148] lstrlenW (lpString=".ppt") returned 4
	[0042.148] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0042.148] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105
	[0042.148] lstrlenW (lpString=".zip") returned 4
	[0042.148] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0042.148] lstrlenW (lpString=".rar") returned 4
	[0042.148] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0042.148] lstrlenW (lpString=".bz2") returned 4
	[0042.148] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0042.149] lstrlenW (lpString=".7z") returned 3
	[0042.149] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0042.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105
	[0042.149] lstrlenW (lpString=".dbf") returned 4
	[0042.149] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0042.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105
	[0042.149] lstrlenW (lpString=".1cd") returned 4
	[0042.149] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0042.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105
	[0042.149] lstrlenW (lpString=".jpg") returned 4
	[0042.149] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0042.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105
	[0042.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105
	[0042.149] lstrlenW (lpString=".doc") returned 4
	[0042.149] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0042.149] lstrlenW (lpString=".docx") returned 5
	[0042.149] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0042.149] lstrlenW (lpString=".pdf") returned 4
	[0042.149] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0042.149] lstrlenW (lpString=".xls") returned 4
	[0042.149] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0042.149] lstrlenW (lpString=".xlsx") returned 5
	[0042.149] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0042.149] lstrlenW (lpString=".ppt") returned 4
	[0042.149] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0042.149] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105
	[0042.149] lstrlenW (lpString=".zip") returned 4
	[0042.149] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0042.149] lstrlenW (lpString=".rar") returned 4
	[0042.149] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0042.149] lstrlenW (lpString=".bz2") returned 4
	[0042.149] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0042.150] lstrlenW (lpString=".7z") returned 3
	[0042.150] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0042.150] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105
	[0042.150] lstrlenW (lpString=".dbf") returned 4
	[0042.150] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0042.150] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105
	[0042.150] lstrlenW (lpString=".1cd") returned 4
	[0042.150] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0042.150] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML") returned 105
	[0042.150] lstrlenW (lpString=".jpg") returned 4
	[0042.150] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0042.150] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0042.150] lstrlenW (lpString="SETUP.XML") returned 9
	[0042.150] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0042.901] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=6241) returned 1
	[0042.901] CloseHandle (hObject=0x1e0) returned 1
	[0042.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml")) returned 0x20
	[0042.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0042.901] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0042.901] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.901] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.901] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0042.902] GetLastError () returned 0x0
	[0042.902] ReadFile (in: hFile=0x1e0, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x1861, lpOverlapped=0x0) returned 1
	[0043.481] WriteFile (in: hFile=0x194, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x1870, lpOverlapped=0x0) returned 1
	[0043.481] ReadFile (in: hFile=0x1e0, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0043.482] WriteFile (in: hFile=0x194, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0043.482] SetEndOfFile (hFile=0x194) returned 1
	[0044.000] CloseHandle (hObject=0x194) returned 1
	[0044.001] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.001] SetEndOfFile (hFile=0x1e0) returned 1
	[0044.002] CloseHandle (hObject=0x1e0) returned 1
	[0044.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0044.002] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml")) returned 1
	[0044.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0044.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0044.002] lstrlenW (lpString=".doc") returned 4
	[0044.002] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0044.002] lstrlenW (lpString=".docx") returned 5
	[0044.002] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0044.002] lstrlenW (lpString=".pdf") returned 4
	[0044.002] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0044.002] lstrlenW (lpString=".xls") returned 4
	[0044.002] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0044.003] lstrlenW (lpString=".xlsx") returned 5
	[0044.003] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0044.003] lstrlenW (lpString=".ppt") returned 4
	[0044.003] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0044.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0044.003] lstrlenW (lpString=".zip") returned 4
	[0044.003] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0044.003] lstrlenW (lpString=".rar") returned 4
	[0044.003] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0044.003] lstrlenW (lpString=".bz2") returned 4
	[0044.003] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0044.003] lstrlenW (lpString=".7z") returned 3
	[0044.003] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0044.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0044.003] lstrlenW (lpString=".dbf") returned 4
	[0044.004] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0044.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0044.004] lstrlenW (lpString=".1cd") returned 4
	[0044.004] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0044.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0044.004] lstrlenW (lpString=".jpg") returned 4
	[0044.004] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0044.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0044.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0044.004] lstrlenW (lpString=".doc") returned 4
	[0044.004] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0044.004] lstrlenW (lpString=".docx") returned 5
	[0044.004] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0044.004] lstrlenW (lpString=".pdf") returned 4
	[0044.004] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0044.004] lstrlenW (lpString=".xls") returned 4
	[0044.004] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0044.004] lstrlenW (lpString=".xlsx") returned 5
	[0044.004] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0044.004] lstrlenW (lpString=".ppt") returned 4
	[0044.004] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0044.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0044.004] lstrlenW (lpString=".zip") returned 4
	[0044.004] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0044.004] lstrlenW (lpString=".rar") returned 4
	[0044.004] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0044.004] lstrlenW (lpString=".bz2") returned 4
	[0044.004] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0044.004] lstrlenW (lpString=".7z") returned 3
	[0044.004] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0044.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0044.004] lstrlenW (lpString=".dbf") returned 4
	[0044.005] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0044.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0044.005] lstrlenW (lpString=".1cd") returned 4
	[0044.005] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0044.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML") returned 101
	[0044.005] lstrlenW (lpString=".jpg") returned 4
	[0044.005] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0044.005] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0044.005] lstrlenW (lpString="STOCKS.XML") returned 10
	[0044.005] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0046.185] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=2687) returned 1
	[0046.185] CloseHandle (hObject=0x1f8) returned 1
	[0046.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml")) returned 0x20
	[0046.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.186] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0046.186] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.186] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.186] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0046.186] GetLastError () returned 0x0
	[0046.186] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0xa7f, lpOverlapped=0x0) returned 1
	[0046.323] WriteFile (in: hFile=0x20c, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xa80, lpOverlapped=0x0) returned 1
	[0046.324] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0046.325] WriteFile (in: hFile=0x20c, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0046.325] SetEndOfFile (hFile=0x20c) returned 1
	[0046.325] CloseHandle (hObject=0x20c) returned 1
	[0046.325] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.325] SetEndOfFile (hFile=0x1f8) returned 1
	[0046.326] CloseHandle (hObject=0x1f8) returned 1
	[0046.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0046.326] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml")) returned 1
	[0046.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0046.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0046.327] lstrlenW (lpString=".doc") returned 4
	[0046.327] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0046.327] lstrlenW (lpString=".docx") returned 5
	[0046.327] lstrcmpiW (lpString1=".docx", lpString2="S.XML") returned -1
	[0046.327] lstrlenW (lpString=".pdf") returned 4
	[0046.327] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0046.327] lstrlenW (lpString=".xls") returned 4
	[0046.327] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0046.327] lstrlenW (lpString=".xlsx") returned 5
	[0046.327] lstrcmpiW (lpString1=".xlsx", lpString2="S.XML") returned -1
	[0046.327] lstrlenW (lpString=".ppt") returned 4
	[0046.327] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0046.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0046.327] lstrlenW (lpString=".zip") returned 4
	[0046.327] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0046.327] lstrlenW (lpString=".rar") returned 4
	[0046.327] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0046.327] lstrlenW (lpString=".bz2") returned 4
	[0046.327] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0046.327] lstrlenW (lpString=".7z") returned 3
	[0046.327] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0046.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0046.327] lstrlenW (lpString=".dbf") returned 4
	[0046.327] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0046.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0046.328] lstrlenW (lpString=".1cd") returned 4
	[0046.328] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0046.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0046.328] lstrlenW (lpString=".jpg") returned 4
	[0046.328] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0046.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0046.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0046.328] lstrlenW (lpString=".doc") returned 4
	[0046.328] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0046.328] lstrlenW (lpString=".docx") returned 5
	[0046.328] lstrcmpiW (lpString1=".docx", lpString2="S.XML") returned -1
	[0046.328] lstrlenW (lpString=".pdf") returned 4
	[0046.328] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0046.328] lstrlenW (lpString=".xls") returned 4
	[0046.328] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0046.328] lstrlenW (lpString=".xlsx") returned 5
	[0046.328] lstrcmpiW (lpString1=".xlsx", lpString2="S.XML") returned -1
	[0046.328] lstrlenW (lpString=".ppt") returned 4
	[0046.328] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0046.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0046.328] lstrlenW (lpString=".zip") returned 4
	[0046.328] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0046.328] lstrlenW (lpString=".rar") returned 4
	[0046.328] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0046.328] lstrlenW (lpString=".bz2") returned 4
	[0046.328] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0046.328] lstrlenW (lpString=".7z") returned 3
	[0046.328] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0046.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0046.328] lstrlenW (lpString=".dbf") returned 4
	[0046.328] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0046.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0046.329] lstrlenW (lpString=".1cd") returned 4
	[0046.329] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0046.329] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML") returned 78
	[0046.329] lstrlenW (lpString=".jpg") returned 4
	[0046.329] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0046.329] lstrcmpiW (lpString1=".htm", lpString2=".beets") returned 1
	[0046.329] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0046.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.424] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=237) returned 1
	[0046.424] CloseHandle (hObject=0x1ec) returned 1
	[0046.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20
	[0046.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.424] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.424] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm") returned 75
	[0046.424] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm") returned 75
	[0046.424] lstrlenW (lpString=".doc") returned 4
	[0046.424] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0046.424] lstrlenW (lpString=".docx") returned 5
	[0046.424] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0046.424] lstrlenW (lpString=".pdf") returned 4
	[0046.424] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0046.424] lstrlenW (lpString=".xls") returned 4
	[0046.424] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0046.424] lstrlenW (lpString=".xlsx") returned 5
	[0046.424] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0046.424] lstrlenW (lpString=".ppt") returned 4
	[0046.424] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0046.424] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm") returned 75
	[0046.424] lstrlenW (lpString=".zip") returned 4
	[0046.424] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0046.425] lstrlenW (lpString=".rar") returned 4
	[0046.425] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0046.425] lstrlenW (lpString=".bz2") returned 4
	[0046.425] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0046.425] lstrlenW (lpString=".7z") returned 3
	[0046.425] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0046.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm") returned 75
	[0046.425] lstrlenW (lpString=".dbf") returned 4
	[0046.425] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0046.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm") returned 75
	[0046.425] lstrlenW (lpString=".1cd") returned 4
	[0046.425] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0046.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm") returned 75
	[0046.425] lstrlenW (lpString=".jpg") returned 4
	[0046.425] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0046.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm") returned 75
	[0046.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm") returned 75
	[0046.425] lstrlenW (lpString=".doc") returned 4
	[0046.425] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0046.425] lstrlenW (lpString=".docx") returned 5
	[0046.425] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0046.425] lstrlenW (lpString=".pdf") returned 4
	[0046.425] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0046.425] lstrlenW (lpString=".xls") returned 4
	[0046.425] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0046.425] lstrlenW (lpString=".xlsx") returned 5
	[0046.425] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0046.425] lstrlenW (lpString=".ppt") returned 4
	[0046.425] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0046.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm") returned 75
	[0046.425] lstrlenW (lpString=".zip") returned 4
	[0046.425] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0046.426] lstrlenW (lpString=".rar") returned 4
	[0046.426] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0046.426] lstrlenW (lpString=".bz2") returned 4
	[0046.426] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0046.426] lstrlenW (lpString=".7z") returned 3
	[0046.426] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0046.426] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm") returned 75
	[0046.426] lstrlenW (lpString=".dbf") returned 4
	[0046.426] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0046.426] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm") returned 75
	[0046.426] lstrlenW (lpString=".1cd") returned 4
	[0046.426] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0046.426] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm") returned 75
	[0046.426] lstrlenW (lpString=".jpg") returned 4
	[0046.426] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0046.426] lstrcmpiW (lpString1=".htm", lpString2=".beets") returned 1
	[0046.426] lstrlenW (lpString="Orange Circles.htm") returned 18
	[0046.426] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.426] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=237) returned 1
	[0046.426] CloseHandle (hObject=0x1ec) returned 1
	[0046.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20
	[0046.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.427] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm") returned 76
	[0046.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm") returned 76
	[0046.427] lstrlenW (lpString=".doc") returned 4
	[0046.427] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0046.427] lstrlenW (lpString=".docx") returned 5
	[0046.427] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0046.427] lstrlenW (lpString=".pdf") returned 4
	[0046.427] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0046.427] lstrlenW (lpString=".xls") returned 4
	[0046.427] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0046.427] lstrlenW (lpString=".xlsx") returned 5
	[0046.427] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0046.427] lstrlenW (lpString=".ppt") returned 4
	[0046.427] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0046.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm") returned 76
	[0046.427] lstrlenW (lpString=".zip") returned 4
	[0046.427] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0046.427] lstrlenW (lpString=".rar") returned 4
	[0046.427] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0046.427] lstrlenW (lpString=".bz2") returned 4
	[0046.427] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0046.427] lstrlenW (lpString=".7z") returned 3
	[0046.427] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0046.427] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm") returned 76
	[0046.427] lstrlenW (lpString=".dbf") returned 4
	[0046.427] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0046.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm") returned 76
	[0046.428] lstrlenW (lpString=".1cd") returned 4
	[0046.428] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0046.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm") returned 76
	[0046.428] lstrlenW (lpString=".jpg") returned 4
	[0046.428] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0046.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm") returned 76
	[0046.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm") returned 76
	[0046.428] lstrlenW (lpString=".doc") returned 4
	[0046.428] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0046.428] lstrlenW (lpString=".docx") returned 5
	[0046.428] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0046.428] lstrlenW (lpString=".pdf") returned 4
	[0046.428] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0046.428] lstrlenW (lpString=".xls") returned 4
	[0046.428] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0046.428] lstrlenW (lpString=".xlsx") returned 5
	[0046.428] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0046.428] lstrlenW (lpString=".ppt") returned 4
	[0046.428] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0046.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm") returned 76
	[0046.428] lstrlenW (lpString=".zip") returned 4
	[0046.428] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0046.428] lstrlenW (lpString=".rar") returned 4
	[0046.428] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0046.428] lstrlenW (lpString=".bz2") returned 4
	[0046.428] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0046.428] lstrlenW (lpString=".7z") returned 3
	[0046.428] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0046.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm") returned 76
	[0046.428] lstrlenW (lpString=".dbf") returned 4
	[0046.428] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0046.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm") returned 76
	[0046.429] lstrlenW (lpString=".1cd") returned 4
	[0046.429] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0046.429] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm") returned 76
	[0046.429] lstrlenW (lpString=".jpg") returned 4
	[0046.429] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0046.429] lstrcmpiW (lpString1=".jpg", lpString2=".beets") returned 1
	[0046.429] lstrlenW (lpString="OrangeCircles.jpg") returned 17
	[0046.429] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.429] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=6381) returned 1
	[0046.429] CloseHandle (hObject=0x1ec) returned 1
	[0046.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20
	[0046.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.429] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.429] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0046.429] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0046.429] lstrlenW (lpString=".doc") returned 4
	[0046.430] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0046.430] lstrlenW (lpString=".docx") returned 5
	[0046.430] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0046.430] lstrlenW (lpString=".pdf") returned 4
	[0046.430] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0046.430] lstrlenW (lpString=".xls") returned 4
	[0046.430] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0046.430] lstrlenW (lpString=".xlsx") returned 5
	[0046.430] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0046.430] lstrlenW (lpString=".ppt") returned 4
	[0046.430] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0046.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0046.430] lstrlenW (lpString=".zip") returned 4
	[0046.430] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0046.430] lstrlenW (lpString=".rar") returned 4
	[0046.430] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0046.430] lstrlenW (lpString=".bz2") returned 4
	[0046.430] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0046.430] lstrlenW (lpString=".7z") returned 3
	[0046.430] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0046.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0046.430] lstrlenW (lpString=".dbf") returned 4
	[0046.430] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0046.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0046.430] lstrlenW (lpString=".1cd") returned 4
	[0046.430] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0046.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0046.430] lstrlenW (lpString=".jpg") returned 4
	[0046.430] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0046.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0046.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0046.430] lstrlenW (lpString=".doc") returned 4
	[0046.430] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0046.431] lstrlenW (lpString=".docx") returned 5
	[0046.431] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0046.431] lstrlenW (lpString=".pdf") returned 4
	[0046.431] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0046.431] lstrlenW (lpString=".xls") returned 4
	[0046.431] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0046.431] lstrlenW (lpString=".xlsx") returned 5
	[0046.431] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0046.431] lstrlenW (lpString=".ppt") returned 4
	[0046.431] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0046.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0046.431] lstrlenW (lpString=".zip") returned 4
	[0046.431] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0046.431] lstrlenW (lpString=".rar") returned 4
	[0046.431] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0046.431] lstrlenW (lpString=".bz2") returned 4
	[0046.431] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0046.431] lstrlenW (lpString=".7z") returned 3
	[0046.431] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0046.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0046.431] lstrlenW (lpString=".dbf") returned 4
	[0046.431] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0046.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0046.431] lstrlenW (lpString=".1cd") returned 4
	[0046.431] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0046.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0046.431] lstrlenW (lpString=".jpg") returned 4
	[0046.431] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0046.431] lstrcmpiW (lpString1=".htm", lpString2=".beets") returned 1
	[0046.432] lstrlenW (lpString="Peacock.htm") returned 11
	[0046.432] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.432] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=232) returned 1
	[0046.432] CloseHandle (hObject=0x1ec) returned 1
	[0046.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20
	[0046.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.433] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.433] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 69
	[0046.433] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 69
	[0046.433] lstrlenW (lpString=".doc") returned 4
	[0046.433] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0046.433] lstrlenW (lpString=".docx") returned 5
	[0046.433] lstrcmpiW (lpString1=".docx", lpString2="k.htm") returned -1
	[0046.433] lstrlenW (lpString=".pdf") returned 4
	[0046.433] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0046.433] lstrlenW (lpString=".xls") returned 4
	[0046.433] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0046.433] lstrlenW (lpString=".xlsx") returned 5
	[0046.433] lstrcmpiW (lpString1=".xlsx", lpString2="k.htm") returned -1
	[0046.433] lstrlenW (lpString=".ppt") returned 4
	[0046.433] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0046.433] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 69
	[0046.433] lstrlenW (lpString=".zip") returned 4
	[0046.433] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0046.433] lstrlenW (lpString=".rar") returned 4
	[0046.433] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0046.433] lstrlenW (lpString=".bz2") returned 4
	[0046.433] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0046.433] lstrlenW (lpString=".7z") returned 3
	[0046.434] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0046.434] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 69
	[0046.434] lstrlenW (lpString=".dbf") returned 4
	[0046.434] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0046.434] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 69
	[0046.434] lstrlenW (lpString=".1cd") returned 4
	[0046.434] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0046.434] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 69
	[0046.434] lstrlenW (lpString=".jpg") returned 4
	[0046.434] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0046.434] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 69
	[0046.434] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 69
	[0046.434] lstrlenW (lpString=".doc") returned 4
	[0046.434] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0046.434] lstrlenW (lpString=".docx") returned 5
	[0046.434] lstrcmpiW (lpString1=".docx", lpString2="k.htm") returned -1
	[0046.434] lstrlenW (lpString=".pdf") returned 4
	[0046.434] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0046.434] lstrlenW (lpString=".xls") returned 4
	[0046.434] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0046.434] lstrlenW (lpString=".xlsx") returned 5
	[0046.434] lstrcmpiW (lpString1=".xlsx", lpString2="k.htm") returned -1
	[0046.434] lstrlenW (lpString=".ppt") returned 4
	[0046.434] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0046.434] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 69
	[0046.434] lstrlenW (lpString=".zip") returned 4
	[0046.434] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0046.434] lstrlenW (lpString=".rar") returned 4
	[0046.434] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0046.434] lstrlenW (lpString=".bz2") returned 4
	[0046.434] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0046.434] lstrlenW (lpString=".7z") returned 3
	[0046.434] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0046.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 69
	[0046.435] lstrlenW (lpString=".dbf") returned 4
	[0046.435] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0046.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 69
	[0046.435] lstrlenW (lpString=".1cd") returned 4
	[0046.435] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0046.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 69
	[0046.435] lstrlenW (lpString=".jpg") returned 4
	[0046.435] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0046.435] lstrcmpiW (lpString1=".jpg", lpString2=".beets") returned 1
	[0046.435] lstrlenW (lpString="Peacock.jpg") returned 11
	[0046.435] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.441] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=5115) returned 1
	[0046.441] CloseHandle (hObject=0x1ec) returned 1
	[0046.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20
	[0046.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.441] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.441] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 69
	[0046.441] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 69
	[0046.441] lstrlenW (lpString=".doc") returned 4
	[0046.441] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0046.441] lstrlenW (lpString=".docx") returned 5
	[0046.441] lstrcmpiW (lpString1=".docx", lpString2="k.jpg") returned -1
	[0046.441] lstrlenW (lpString=".pdf") returned 4
	[0046.441] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0046.441] lstrlenW (lpString=".xls") returned 4
	[0046.441] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0046.441] lstrlenW (lpString=".xlsx") returned 5
	[0046.441] lstrcmpiW (lpString1=".xlsx", lpString2="k.jpg") returned -1
	[0046.441] lstrlenW (lpString=".ppt") returned 4
	[0046.441] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0046.441] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 69
	[0046.441] lstrlenW (lpString=".zip") returned 4
	[0046.441] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0046.441] lstrlenW (lpString=".rar") returned 4
	[0046.441] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0046.441] lstrlenW (lpString=".bz2") returned 4
	[0046.441] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0046.442] lstrlenW (lpString=".7z") returned 3
	[0046.442] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0046.442] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 69
	[0046.442] lstrlenW (lpString=".dbf") returned 4
	[0046.442] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0046.442] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 69
	[0046.442] lstrlenW (lpString=".1cd") returned 4
	[0046.442] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0046.442] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 69
	[0046.442] lstrlenW (lpString=".jpg") returned 4
	[0046.442] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0046.442] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 69
	[0046.442] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 69
	[0046.442] lstrlenW (lpString=".doc") returned 4
	[0046.442] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0046.442] lstrlenW (lpString=".docx") returned 5
	[0046.442] lstrcmpiW (lpString1=".docx", lpString2="k.jpg") returned -1
	[0046.442] lstrlenW (lpString=".pdf") returned 4
	[0046.442] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0046.442] lstrlenW (lpString=".xls") returned 4
	[0046.442] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0046.442] lstrlenW (lpString=".xlsx") returned 5
	[0046.442] lstrcmpiW (lpString1=".xlsx", lpString2="k.jpg") returned -1
	[0046.442] lstrlenW (lpString=".ppt") returned 4
	[0046.442] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0046.442] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 69
	[0046.442] lstrlenW (lpString=".zip") returned 4
	[0046.442] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0046.442] lstrlenW (lpString=".rar") returned 4
	[0046.442] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0046.442] lstrlenW (lpString=".bz2") returned 4
	[0046.442] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0046.442] lstrlenW (lpString=".7z") returned 3
	[0046.443] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0046.443] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 69
	[0046.443] lstrlenW (lpString=".dbf") returned 4
	[0046.443] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0046.443] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 69
	[0046.443] lstrlenW (lpString=".1cd") returned 4
	[0046.443] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0046.443] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 69
	[0046.443] lstrlenW (lpString=".jpg") returned 4
	[0046.443] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0046.443] lstrcmpiW (lpString1=".jpg", lpString2=".beets") returned 1
	[0046.443] lstrlenW (lpString="SoftBlue.jpg") returned 12
	[0046.443] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.444] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=10569) returned 1
	[0046.444] CloseHandle (hObject=0x1ec) returned 1
	[0046.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20
	[0046.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.444] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70
	[0046.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70
	[0046.444] lstrlenW (lpString=".doc") returned 4
	[0046.444] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0046.444] lstrlenW (lpString=".docx") returned 5
	[0046.444] lstrcmpiW (lpString1=".docx", lpString2="e.jpg") returned -1
	[0046.444] lstrlenW (lpString=".pdf") returned 4
	[0046.444] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0046.444] lstrlenW (lpString=".xls") returned 4
	[0046.444] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0046.444] lstrlenW (lpString=".xlsx") returned 5
	[0046.444] lstrcmpiW (lpString1=".xlsx", lpString2="e.jpg") returned -1
	[0046.444] lstrlenW (lpString=".ppt") returned 4
	[0046.444] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0046.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70
	[0046.444] lstrlenW (lpString=".zip") returned 4
	[0046.445] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0046.445] lstrlenW (lpString=".rar") returned 4
	[0046.445] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0046.445] lstrlenW (lpString=".bz2") returned 4
	[0046.445] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0046.445] lstrlenW (lpString=".7z") returned 3
	[0046.445] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0046.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 70
	[0046.445] lstrlenW (lpString=".dbf") returned 4
	[0046.445] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0046.455] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.455] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.455] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0046.462] GetLastError () returned 0x0
	[0046.462] ReadFile (in: hFile=0x224, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x6292, lpOverlapped=0x0) returned 1
	[0046.474] WriteFile (in: hFile=0x200, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x62a0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x62a0, lpOverlapped=0x0) returned 1
	[0046.476] ReadFile (in: hFile=0x224, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0046.476] WriteFile (in: hFile=0x200, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0046.476] SetEndOfFile (hFile=0x200) returned 1
	[0046.476] CloseHandle (hObject=0x200) returned 1
	[0046.477] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.477] SetEndOfFile (hFile=0x224) returned 1
	[0046.478] CloseHandle (hObject=0x224) returned 1
	[0046.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0046.478] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png")) returned 1
	[0046.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77
	[0046.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77
	[0046.478] lstrlenW (lpString=".doc") returned 4
	[0046.478] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0046.478] lstrlenW (lpString=".docx") returned 5
	[0046.478] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0046.478] lstrlenW (lpString=".pdf") returned 4
	[0046.478] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0046.478] lstrlenW (lpString=".xls") returned 4
	[0046.478] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0046.478] lstrlenW (lpString=".xlsx") returned 5
	[0046.478] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0046.479] lstrlenW (lpString=".ppt") returned 4
	[0046.479] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0046.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77
	[0046.479] lstrlenW (lpString=".zip") returned 4
	[0046.479] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0046.479] lstrlenW (lpString=".rar") returned 4
	[0046.479] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0046.479] lstrlenW (lpString=".bz2") returned 4
	[0046.479] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0046.479] lstrlenW (lpString=".7z") returned 3
	[0046.479] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0046.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77
	[0046.479] lstrlenW (lpString=".dbf") returned 4
	[0046.479] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0046.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77
	[0046.479] lstrlenW (lpString=".1cd") returned 4
	[0046.479] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0046.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77
	[0046.479] lstrlenW (lpString=".jpg") returned 4
	[0046.479] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0046.481] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77
	[0046.481] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77
	[0046.481] lstrlenW (lpString=".doc") returned 4
	[0046.481] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0046.481] lstrlenW (lpString=".docx") returned 5
	[0046.482] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0046.482] lstrlenW (lpString=".pdf") returned 4
	[0046.482] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0046.482] lstrlenW (lpString=".xls") returned 4
	[0046.482] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0046.482] lstrlenW (lpString=".xlsx") returned 5
	[0046.482] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0046.482] lstrlenW (lpString=".ppt") returned 4
	[0046.482] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0046.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77
	[0046.482] lstrlenW (lpString=".zip") returned 4
	[0046.482] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0046.482] lstrlenW (lpString=".rar") returned 4
	[0046.482] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0046.482] lstrlenW (lpString=".bz2") returned 4
	[0046.482] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0046.482] lstrlenW (lpString=".7z") returned 3
	[0046.482] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0046.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77
	[0046.482] lstrlenW (lpString=".dbf") returned 4
	[0046.482] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0046.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77
	[0046.482] lstrlenW (lpString=".1cd") returned 4
	[0046.482] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0046.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG") returned 77
	[0046.482] lstrlenW (lpString=".jpg") returned 4
	[0046.482] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0046.482] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0046.482] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0046.482] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0046.483] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=2848) returned 1
	[0046.483] CloseHandle (hObject=0x224) returned 1
	[0046.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif")) returned 0x20
	[0046.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.483] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0046.483] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.483] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.483] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0047.180] GetLastError () returned 0x0
	[0047.180] ReadFile (in: hFile=0x224, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0xb20, lpOverlapped=0x0) returned 1
	[0047.181] WriteFile (in: hFile=0x200, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xb30, lpOverlapped=0x0) returned 1
	[0047.182] ReadFile (in: hFile=0x224, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.182] WriteFile (in: hFile=0x200, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0047.182] SetEndOfFile (hFile=0x200) returned 1
	[0047.183] CloseHandle (hObject=0x200) returned 1
	[0047.183] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.183] SetEndOfFile (hFile=0x224) returned 1
	[0047.184] CloseHandle (hObject=0x224) returned 1
	[0047.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.184] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif")) returned 1
	[0047.184] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72
	[0047.184] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72
	[0047.184] lstrlenW (lpString=".doc") returned 4
	[0047.184] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.184] lstrlenW (lpString=".docx") returned 5
	[0047.184] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.184] lstrlenW (lpString=".pdf") returned 4
	[0047.184] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.184] lstrlenW (lpString=".xls") returned 4
	[0047.184] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.184] lstrlenW (lpString=".xlsx") returned 5
	[0047.184] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.184] lstrlenW (lpString=".ppt") returned 4
	[0047.184] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.184] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72
	[0047.184] lstrlenW (lpString=".zip") returned 4
	[0047.185] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.185] lstrlenW (lpString=".rar") returned 4
	[0047.185] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.185] lstrlenW (lpString=".bz2") returned 4
	[0047.185] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.185] lstrlenW (lpString=".7z") returned 3
	[0047.185] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.185] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72
	[0047.185] lstrlenW (lpString=".dbf") returned 4
	[0047.185] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.185] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72
	[0047.185] lstrlenW (lpString=".1cd") returned 4
	[0047.185] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.185] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72
	[0047.185] lstrlenW (lpString=".jpg") returned 4
	[0047.185] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.185] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72
	[0047.185] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72
	[0047.185] lstrlenW (lpString=".doc") returned 4
	[0047.185] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.185] lstrlenW (lpString=".docx") returned 5
	[0047.185] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.185] lstrlenW (lpString=".pdf") returned 4
	[0047.185] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.185] lstrlenW (lpString=".xls") returned 4
	[0047.185] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.185] lstrlenW (lpString=".xlsx") returned 5
	[0047.185] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.185] lstrlenW (lpString=".ppt") returned 4
	[0047.185] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.185] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72
	[0047.185] lstrlenW (lpString=".zip") returned 4
	[0047.185] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.186] lstrlenW (lpString=".rar") returned 4
	[0047.186] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.186] lstrlenW (lpString=".bz2") returned 4
	[0047.186] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.186] lstrlenW (lpString=".7z") returned 3
	[0047.186] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.186] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72
	[0047.186] lstrlenW (lpString=".dbf") returned 4
	[0047.186] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.186] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72
	[0047.186] lstrlenW (lpString=".1cd") returned 4
	[0047.186] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.186] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF") returned 72
	[0047.186] lstrlenW (lpString=".jpg") returned 4
	[0047.186] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.186] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0047.186] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0047.186] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0047.186] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1925) returned 1
	[0047.186] CloseHandle (hObject=0x224) returned 1
	[0047.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif")) returned 0x20
	[0047.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.187] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0047.187] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.187] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.187] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0047.188] GetLastError () returned 0x0
	[0047.188] ReadFile (in: hFile=0x224, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x785, lpOverlapped=0x0) returned 1
	[0047.190] WriteFile (in: hFile=0x200, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x790, lpOverlapped=0x0) returned 1
	[0047.191] ReadFile (in: hFile=0x224, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.191] WriteFile (in: hFile=0x200, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0047.191] SetEndOfFile (hFile=0x200) returned 1
	[0047.191] CloseHandle (hObject=0x200) returned 1
	[0047.191] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.191] SetEndOfFile (hFile=0x224) returned 1
	[0047.192] CloseHandle (hObject=0x224) returned 1
	[0047.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.192] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif")) returned 1
	[0047.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76
	[0047.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76
	[0047.192] lstrlenW (lpString=".doc") returned 4
	[0047.192] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.193] lstrlenW (lpString=".docx") returned 5
	[0047.193] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.193] lstrlenW (lpString=".pdf") returned 4
	[0047.193] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.193] lstrlenW (lpString=".xls") returned 4
	[0047.193] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.193] lstrlenW (lpString=".xlsx") returned 5
	[0047.193] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.193] lstrlenW (lpString=".ppt") returned 4
	[0047.193] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76
	[0047.193] lstrlenW (lpString=".zip") returned 4
	[0047.193] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.193] lstrlenW (lpString=".rar") returned 4
	[0047.193] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.193] lstrlenW (lpString=".bz2") returned 4
	[0047.193] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.193] lstrlenW (lpString=".7z") returned 3
	[0047.193] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76
	[0047.193] lstrlenW (lpString=".dbf") returned 4
	[0047.193] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76
	[0047.193] lstrlenW (lpString=".1cd") returned 4
	[0047.193] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76
	[0047.193] lstrlenW (lpString=".jpg") returned 4
	[0047.193] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76
	[0047.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76
	[0047.193] lstrlenW (lpString=".doc") returned 4
	[0047.193] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.194] lstrlenW (lpString=".docx") returned 5
	[0047.194] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.194] lstrlenW (lpString=".pdf") returned 4
	[0047.194] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.194] lstrlenW (lpString=".xls") returned 4
	[0047.194] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.194] lstrlenW (lpString=".xlsx") returned 5
	[0047.194] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.194] lstrlenW (lpString=".ppt") returned 4
	[0047.194] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.194] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76
	[0047.194] lstrlenW (lpString=".zip") returned 4
	[0047.194] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.194] lstrlenW (lpString=".rar") returned 4
	[0047.194] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.194] lstrlenW (lpString=".bz2") returned 4
	[0047.194] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.194] lstrlenW (lpString=".7z") returned 3
	[0047.194] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.194] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76
	[0047.194] lstrlenW (lpString=".dbf") returned 4
	[0047.194] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.194] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76
	[0047.194] lstrlenW (lpString=".1cd") returned 4
	[0047.194] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.194] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF") returned 76
	[0047.194] lstrlenW (lpString=".jpg") returned 4
	[0047.194] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.194] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0047.195] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0047.195] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0047.198] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=27407) returned 1
	[0047.198] CloseHandle (hObject=0x224) returned 1
	[0047.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png")) returned 0x20
	[0047.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.198] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0047.198] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.199] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.199] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0047.199] GetLastError () returned 0x0
	[0047.199] ReadFile (in: hFile=0x224, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x6b0f, lpOverlapped=0x0) returned 1
	[0047.201] WriteFile (in: hFile=0x200, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x6b10, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x6b10, lpOverlapped=0x0) returned 1
	[0047.202] ReadFile (in: hFile=0x224, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.202] WriteFile (in: hFile=0x200, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0047.202] SetEndOfFile (hFile=0x200) returned 1
	[0047.202] CloseHandle (hObject=0x200) returned 1
	[0047.202] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.202] SetEndOfFile (hFile=0x224) returned 1
	[0047.203] CloseHandle (hObject=0x224) returned 1
	[0047.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.204] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png")) returned 1
	[0047.204] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77
	[0047.204] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77
	[0047.204] lstrlenW (lpString=".doc") returned 4
	[0047.204] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.204] lstrlenW (lpString=".docx") returned 5
	[0047.204] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.204] lstrlenW (lpString=".pdf") returned 4
	[0047.204] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.204] lstrlenW (lpString=".xls") returned 4
	[0047.204] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.204] lstrlenW (lpString=".xlsx") returned 5
	[0047.204] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.204] lstrlenW (lpString=".ppt") returned 4
	[0047.204] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.204] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77
	[0047.204] lstrlenW (lpString=".zip") returned 4
	[0047.204] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.204] lstrlenW (lpString=".rar") returned 4
	[0047.204] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.204] lstrlenW (lpString=".bz2") returned 4
	[0047.204] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.204] lstrlenW (lpString=".7z") returned 3
	[0047.204] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77
	[0047.205] lstrlenW (lpString=".dbf") returned 4
	[0047.205] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77
	[0047.205] lstrlenW (lpString=".1cd") returned 4
	[0047.205] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77
	[0047.205] lstrlenW (lpString=".jpg") returned 4
	[0047.205] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77
	[0047.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77
	[0047.205] lstrlenW (lpString=".doc") returned 4
	[0047.205] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.205] lstrlenW (lpString=".docx") returned 5
	[0047.205] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.205] lstrlenW (lpString=".pdf") returned 4
	[0047.205] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.205] lstrlenW (lpString=".xls") returned 4
	[0047.205] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.205] lstrlenW (lpString=".xlsx") returned 5
	[0047.205] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.205] lstrlenW (lpString=".ppt") returned 4
	[0047.205] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77
	[0047.205] lstrlenW (lpString=".zip") returned 4
	[0047.205] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.205] lstrlenW (lpString=".rar") returned 4
	[0047.205] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.205] lstrlenW (lpString=".bz2") returned 4
	[0047.205] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.205] lstrlenW (lpString=".7z") returned 3
	[0047.205] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77
	[0047.206] lstrlenW (lpString=".dbf") returned 4
	[0047.206] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.206] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77
	[0047.206] lstrlenW (lpString=".1cd") returned 4
	[0047.206] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.206] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG") returned 77
	[0047.206] lstrlenW (lpString=".jpg") returned 4
	[0047.206] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.206] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0047.206] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0047.206] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0047.206] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=3479) returned 1
	[0047.206] CloseHandle (hObject=0x224) returned 1
	[0047.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif")) returned 0x20
	[0047.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.207] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0047.207] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.207] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.207] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0047.208] GetLastError () returned 0x0
	[0047.208] ReadFile (in: hFile=0x224, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0xd97, lpOverlapped=0x0) returned 1
	[0047.210] WriteFile (in: hFile=0x200, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xda0, lpOverlapped=0x0) returned 1
	[0047.211] ReadFile (in: hFile=0x224, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.211] WriteFile (in: hFile=0x200, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0047.211] SetEndOfFile (hFile=0x200) returned 1
	[0047.211] CloseHandle (hObject=0x200) returned 1
	[0047.211] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.211] SetEndOfFile (hFile=0x224) returned 1
	[0047.212] CloseHandle (hObject=0x224) returned 1
	[0047.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.212] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif")) returned 1
	[0047.212] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76
	[0047.212] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76
	[0047.213] lstrlenW (lpString=".doc") returned 4
	[0047.213] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.213] lstrlenW (lpString=".docx") returned 5
	[0047.213] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.213] lstrlenW (lpString=".pdf") returned 4
	[0047.213] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.213] lstrlenW (lpString=".xls") returned 4
	[0047.213] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.213] lstrlenW (lpString=".xlsx") returned 5
	[0047.213] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.213] lstrlenW (lpString=".ppt") returned 4
	[0047.213] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.213] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76
	[0047.213] lstrlenW (lpString=".zip") returned 4
	[0047.213] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.213] lstrlenW (lpString=".rar") returned 4
	[0047.213] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.213] lstrlenW (lpString=".bz2") returned 4
	[0047.213] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.213] lstrlenW (lpString=".7z") returned 3
	[0047.213] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.213] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76
	[0047.213] lstrlenW (lpString=".dbf") returned 4
	[0047.213] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.213] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76
	[0047.213] lstrlenW (lpString=".1cd") returned 4
	[0047.213] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.213] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76
	[0047.213] lstrlenW (lpString=".jpg") returned 4
	[0047.213] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.214] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76
	[0047.214] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76
	[0047.214] lstrlenW (lpString=".doc") returned 4
	[0047.214] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.214] lstrlenW (lpString=".docx") returned 5
	[0047.214] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.214] lstrlenW (lpString=".pdf") returned 4
	[0047.214] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.214] lstrlenW (lpString=".xls") returned 4
	[0047.214] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.214] lstrlenW (lpString=".xlsx") returned 5
	[0047.214] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.214] lstrlenW (lpString=".ppt") returned 4
	[0047.214] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.214] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76
	[0047.214] lstrlenW (lpString=".zip") returned 4
	[0047.214] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.214] lstrlenW (lpString=".rar") returned 4
	[0047.214] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.214] lstrlenW (lpString=".bz2") returned 4
	[0047.214] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.214] lstrlenW (lpString=".7z") returned 3
	[0047.214] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.214] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76
	[0047.214] lstrlenW (lpString=".dbf") returned 4
	[0047.214] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.214] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76
	[0047.214] lstrlenW (lpString=".1cd") returned 4
	[0047.214] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.214] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF") returned 76
	[0047.214] lstrlenW (lpString=".jpg") returned 4
	[0047.214] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.215] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0047.215] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0047.215] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0047.215] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=31837) returned 1
	[0047.215] CloseHandle (hObject=0x224) returned 1
	[0047.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png")) returned 0x20
	[0047.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.215] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0047.215] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.215] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.215] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0047.216] GetLastError () returned 0x0
	[0047.216] ReadFile (in: hFile=0x224, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x7c5d, lpOverlapped=0x0) returned 1
	[0047.544] WriteFile (in: hFile=0x200, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x7c60, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x7c60, lpOverlapped=0x0) returned 1
	[0047.546] ReadFile (in: hFile=0x224, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.546] WriteFile (in: hFile=0x200, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0047.546] SetEndOfFile (hFile=0x200) returned 1
	[0047.546] CloseHandle (hObject=0x200) returned 1
	[0047.546] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.546] SetEndOfFile (hFile=0x224) returned 1
	[0047.547] CloseHandle (hObject=0x224) returned 1
	[0047.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.547] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png")) returned 1
	[0047.548] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77
	[0047.548] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77
	[0047.548] lstrlenW (lpString=".doc") returned 4
	[0047.548] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.548] lstrlenW (lpString=".docx") returned 5
	[0047.548] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.548] lstrlenW (lpString=".pdf") returned 4
	[0047.548] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.548] lstrlenW (lpString=".xls") returned 4
	[0047.548] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.548] lstrlenW (lpString=".xlsx") returned 5
	[0047.548] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.548] lstrlenW (lpString=".ppt") returned 4
	[0047.548] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.548] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77
	[0047.548] lstrlenW (lpString=".zip") returned 4
	[0047.548] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.548] lstrlenW (lpString=".rar") returned 4
	[0047.548] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.548] lstrlenW (lpString=".bz2") returned 4
	[0047.548] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.548] lstrlenW (lpString=".7z") returned 3
	[0047.548] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.548] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77
	[0047.548] lstrlenW (lpString=".dbf") returned 4
	[0047.548] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.548] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77
	[0047.548] lstrlenW (lpString=".1cd") returned 4
	[0047.548] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.548] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77
	[0047.548] lstrlenW (lpString=".jpg") returned 4
	[0047.548] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77
	[0047.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77
	[0047.549] lstrlenW (lpString=".doc") returned 4
	[0047.549] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.549] lstrlenW (lpString=".docx") returned 5
	[0047.549] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.549] lstrlenW (lpString=".pdf") returned 4
	[0047.549] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.549] lstrlenW (lpString=".xls") returned 4
	[0047.549] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.549] lstrlenW (lpString=".xlsx") returned 5
	[0047.549] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.549] lstrlenW (lpString=".ppt") returned 4
	[0047.549] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77
	[0047.549] lstrlenW (lpString=".zip") returned 4
	[0047.549] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.549] lstrlenW (lpString=".rar") returned 4
	[0047.549] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.549] lstrlenW (lpString=".bz2") returned 4
	[0047.549] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.549] lstrlenW (lpString=".7z") returned 3
	[0047.549] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77
	[0047.549] lstrlenW (lpString=".dbf") returned 4
	[0047.549] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77
	[0047.549] lstrlenW (lpString=".1cd") returned 4
	[0047.549] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG") returned 77
	[0047.549] lstrlenW (lpString=".jpg") returned 4
	[0047.549] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.550] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0047.550] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0047.550] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0047.806] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=20371) returned 1
	[0047.806] CloseHandle (hObject=0x1ec) returned 1
	[0047.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png")) returned 0x20
	[0047.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0047.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0047.807] GetLastError () returned 0x0
	[0047.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x4f93, lpOverlapped=0x0) returned 1
	[0047.809] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x4fa0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x4fa0, lpOverlapped=0x0) returned 1
	[0047.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.810] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0047.811] SetEndOfFile (hFile=0x1b8) returned 1
	[0047.811] CloseHandle (hObject=0x1b8) returned 1
	[0047.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.811] SetEndOfFile (hFile=0x1ec) returned 1
	[0047.812] CloseHandle (hObject=0x1ec) returned 1
	[0047.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.812] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png")) returned 1
	[0047.812] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76
	[0047.812] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76
	[0047.812] lstrlenW (lpString=".doc") returned 4
	[0047.812] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.812] lstrlenW (lpString=".docx") returned 5
	[0047.812] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.812] lstrlenW (lpString=".pdf") returned 4
	[0047.812] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.812] lstrlenW (lpString=".xls") returned 4
	[0047.812] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.813] lstrlenW (lpString=".xlsx") returned 5
	[0047.813] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.813] lstrlenW (lpString=".ppt") returned 4
	[0047.813] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.813] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76
	[0047.813] lstrlenW (lpString=".zip") returned 4
	[0047.813] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.813] lstrlenW (lpString=".rar") returned 4
	[0047.813] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.813] lstrlenW (lpString=".bz2") returned 4
	[0047.813] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.813] lstrlenW (lpString=".7z") returned 3
	[0047.813] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.813] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76
	[0047.813] lstrlenW (lpString=".dbf") returned 4
	[0047.813] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.813] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76
	[0047.813] lstrlenW (lpString=".1cd") returned 4
	[0047.813] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.813] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76
	[0047.813] lstrlenW (lpString=".jpg") returned 4
	[0047.813] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.813] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76
	[0047.813] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76
	[0047.813] lstrlenW (lpString=".doc") returned 4
	[0047.813] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.813] lstrlenW (lpString=".docx") returned 5
	[0047.813] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.813] lstrlenW (lpString=".pdf") returned 4
	[0047.813] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.813] lstrlenW (lpString=".xls") returned 4
	[0047.813] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.814] lstrlenW (lpString=".xlsx") returned 5
	[0047.814] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.814] lstrlenW (lpString=".ppt") returned 4
	[0047.814] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76
	[0047.814] lstrlenW (lpString=".zip") returned 4
	[0047.814] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.814] lstrlenW (lpString=".rar") returned 4
	[0047.814] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.814] lstrlenW (lpString=".bz2") returned 4
	[0047.814] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.814] lstrlenW (lpString=".7z") returned 3
	[0047.814] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76
	[0047.814] lstrlenW (lpString=".dbf") returned 4
	[0047.814] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76
	[0047.814] lstrlenW (lpString=".1cd") returned 4
	[0047.814] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG") returned 76
	[0047.814] lstrlenW (lpString=".jpg") returned 4
	[0047.814] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.814] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0047.814] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0047.814] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0047.815] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1293) returned 1
	[0047.815] CloseHandle (hObject=0x1ec) returned 1
	[0047.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif")) returned 0x20
	[0047.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.815] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0047.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.815] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0047.817] GetLastError () returned 0x0
	[0047.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x50d, lpOverlapped=0x0) returned 1
	[0047.819] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x510, lpOverlapped=0x0) returned 1
	[0047.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.820] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0047.820] SetEndOfFile (hFile=0x1b8) returned 1
	[0047.820] CloseHandle (hObject=0x1b8) returned 1
	[0047.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.820] SetEndOfFile (hFile=0x1ec) returned 1
	[0047.821] CloseHandle (hObject=0x1ec) returned 1
	[0047.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.821] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif")) returned 1
	[0047.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75
	[0047.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75
	[0047.822] lstrlenW (lpString=".doc") returned 4
	[0047.822] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.822] lstrlenW (lpString=".docx") returned 5
	[0047.822] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.822] lstrlenW (lpString=".pdf") returned 4
	[0047.822] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.822] lstrlenW (lpString=".xls") returned 4
	[0047.822] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.822] lstrlenW (lpString=".xlsx") returned 5
	[0047.822] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.822] lstrlenW (lpString=".ppt") returned 4
	[0047.822] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75
	[0047.822] lstrlenW (lpString=".zip") returned 4
	[0047.822] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.822] lstrlenW (lpString=".rar") returned 4
	[0047.822] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.822] lstrlenW (lpString=".bz2") returned 4
	[0047.822] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.822] lstrlenW (lpString=".7z") returned 3
	[0047.822] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75
	[0047.822] lstrlenW (lpString=".dbf") returned 4
	[0047.822] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75
	[0047.822] lstrlenW (lpString=".1cd") returned 4
	[0047.822] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75
	[0047.822] lstrlenW (lpString=".jpg") returned 4
	[0047.823] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75
	[0047.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75
	[0047.823] lstrlenW (lpString=".doc") returned 4
	[0047.823] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.823] lstrlenW (lpString=".docx") returned 5
	[0047.823] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.823] lstrlenW (lpString=".pdf") returned 4
	[0047.823] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.823] lstrlenW (lpString=".xls") returned 4
	[0047.823] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.823] lstrlenW (lpString=".xlsx") returned 5
	[0047.823] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.823] lstrlenW (lpString=".ppt") returned 4
	[0047.823] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75
	[0047.823] lstrlenW (lpString=".zip") returned 4
	[0047.823] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.823] lstrlenW (lpString=".rar") returned 4
	[0047.823] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.823] lstrlenW (lpString=".bz2") returned 4
	[0047.823] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.823] lstrlenW (lpString=".7z") returned 3
	[0047.823] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75
	[0047.823] lstrlenW (lpString=".dbf") returned 4
	[0047.823] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75
	[0047.823] lstrlenW (lpString=".1cd") returned 4
	[0047.823] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF") returned 75
	[0047.823] lstrlenW (lpString=".jpg") returned 4
	[0047.824] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.824] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0047.824] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0047.824] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0047.824] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=20575) returned 1
	[0047.824] CloseHandle (hObject=0x1ec) returned 1
	[0047.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png")) returned 0x20
	[0047.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.824] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0047.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.824] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0047.825] GetLastError () returned 0x0
	[0047.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x505f, lpOverlapped=0x0) returned 1
	[0047.827] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x5060, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x5060, lpOverlapped=0x0) returned 1
	[0047.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.829] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0047.829] SetEndOfFile (hFile=0x1b8) returned 1
	[0047.829] CloseHandle (hObject=0x1b8) returned 1
	[0047.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.829] SetEndOfFile (hFile=0x1ec) returned 1
	[0047.830] CloseHandle (hObject=0x1ec) returned 1
	[0047.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.830] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png")) returned 1
	[0047.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76
	[0047.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76
	[0047.830] lstrlenW (lpString=".doc") returned 4
	[0047.830] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.831] lstrlenW (lpString=".docx") returned 5
	[0047.831] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.831] lstrlenW (lpString=".pdf") returned 4
	[0047.831] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.831] lstrlenW (lpString=".xls") returned 4
	[0047.831] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.831] lstrlenW (lpString=".xlsx") returned 5
	[0047.831] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.831] lstrlenW (lpString=".ppt") returned 4
	[0047.831] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76
	[0047.831] lstrlenW (lpString=".zip") returned 4
	[0047.831] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.831] lstrlenW (lpString=".rar") returned 4
	[0047.831] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.831] lstrlenW (lpString=".bz2") returned 4
	[0047.831] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.831] lstrlenW (lpString=".7z") returned 3
	[0047.831] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76
	[0047.831] lstrlenW (lpString=".dbf") returned 4
	[0047.831] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76
	[0047.831] lstrlenW (lpString=".1cd") returned 4
	[0047.831] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76
	[0047.831] lstrlenW (lpString=".jpg") returned 4
	[0047.831] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76
	[0047.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76
	[0047.831] lstrlenW (lpString=".doc") returned 4
	[0047.831] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.832] lstrlenW (lpString=".docx") returned 5
	[0047.832] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.832] lstrlenW (lpString=".pdf") returned 4
	[0047.832] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.832] lstrlenW (lpString=".xls") returned 4
	[0047.832] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.832] lstrlenW (lpString=".xlsx") returned 5
	[0047.832] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.832] lstrlenW (lpString=".ppt") returned 4
	[0047.832] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.832] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76
	[0047.832] lstrlenW (lpString=".zip") returned 4
	[0047.832] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.832] lstrlenW (lpString=".rar") returned 4
	[0047.832] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.832] lstrlenW (lpString=".bz2") returned 4
	[0047.832] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.832] lstrlenW (lpString=".7z") returned 3
	[0047.832] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.832] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76
	[0047.832] lstrlenW (lpString=".dbf") returned 4
	[0047.832] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.832] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76
	[0047.832] lstrlenW (lpString=".1cd") returned 4
	[0047.832] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.832] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG") returned 76
	[0047.832] lstrlenW (lpString=".jpg") returned 4
	[0047.832] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.832] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0047.833] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0047.833] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0047.833] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1287) returned 1
	[0047.833] CloseHandle (hObject=0x1ec) returned 1
	[0047.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif")) returned 0x20
	[0047.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.833] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0047.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.833] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0047.837] GetLastError () returned 0x0
	[0047.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x507, lpOverlapped=0x0) returned 1
	[0047.839] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x510, lpOverlapped=0x0) returned 1
	[0047.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.840] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0047.840] SetEndOfFile (hFile=0x1b8) returned 1
	[0047.840] CloseHandle (hObject=0x1b8) returned 1
	[0047.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.840] SetEndOfFile (hFile=0x1ec) returned 1
	[0047.841] CloseHandle (hObject=0x1ec) returned 1
	[0047.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.841] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif")) returned 1
	[0047.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76
	[0047.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76
	[0047.842] lstrlenW (lpString=".doc") returned 4
	[0047.842] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.842] lstrlenW (lpString=".docx") returned 5
	[0047.842] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.842] lstrlenW (lpString=".pdf") returned 4
	[0047.842] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.842] lstrlenW (lpString=".xls") returned 4
	[0047.842] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.842] lstrlenW (lpString=".xlsx") returned 5
	[0047.842] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.842] lstrlenW (lpString=".ppt") returned 4
	[0047.842] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76
	[0047.842] lstrlenW (lpString=".zip") returned 4
	[0047.842] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.842] lstrlenW (lpString=".rar") returned 4
	[0047.842] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.842] lstrlenW (lpString=".bz2") returned 4
	[0047.842] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.842] lstrlenW (lpString=".7z") returned 3
	[0047.842] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76
	[0047.842] lstrlenW (lpString=".dbf") returned 4
	[0047.842] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76
	[0047.842] lstrlenW (lpString=".1cd") returned 4
	[0047.842] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76
	[0047.842] lstrlenW (lpString=".jpg") returned 4
	[0047.842] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76
	[0047.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76
	[0047.843] lstrlenW (lpString=".doc") returned 4
	[0047.843] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.843] lstrlenW (lpString=".docx") returned 5
	[0047.843] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.843] lstrlenW (lpString=".pdf") returned 4
	[0047.843] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.843] lstrlenW (lpString=".xls") returned 4
	[0047.843] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.843] lstrlenW (lpString=".xlsx") returned 5
	[0047.843] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.843] lstrlenW (lpString=".ppt") returned 4
	[0047.843] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76
	[0047.843] lstrlenW (lpString=".zip") returned 4
	[0047.843] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.843] lstrlenW (lpString=".rar") returned 4
	[0047.843] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.843] lstrlenW (lpString=".bz2") returned 4
	[0047.843] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.843] lstrlenW (lpString=".7z") returned 3
	[0047.843] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76
	[0047.843] lstrlenW (lpString=".dbf") returned 4
	[0047.843] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76
	[0047.843] lstrlenW (lpString=".1cd") returned 4
	[0047.843] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF") returned 76
	[0047.843] lstrlenW (lpString=".jpg") returned 4
	[0047.844] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.844] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0047.844] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0047.844] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0047.844] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=28595) returned 1
	[0047.844] CloseHandle (hObject=0x1ec) returned 1
	[0047.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png")) returned 0x20
	[0047.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.844] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0047.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.844] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0047.845] GetLastError () returned 0x0
	[0047.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x6fb3, lpOverlapped=0x0) returned 1
	[0048.113] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x6fc0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x6fc0, lpOverlapped=0x0) returned 1
	[0048.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.115] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0048.115] SetEndOfFile (hFile=0x1b8) returned 1
	[0048.115] CloseHandle (hObject=0x1b8) returned 1
	[0048.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.115] SetEndOfFile (hFile=0x1ec) returned 1
	[0048.116] CloseHandle (hObject=0x1ec) returned 1
	[0048.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0048.116] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png")) returned 1
	[0048.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77
	[0048.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77
	[0048.117] lstrlenW (lpString=".doc") returned 4
	[0048.117] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0048.117] lstrlenW (lpString=".docx") returned 5
	[0048.117] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0048.117] lstrlenW (lpString=".pdf") returned 4
	[0048.117] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0048.117] lstrlenW (lpString=".xls") returned 4
	[0048.117] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0048.117] lstrlenW (lpString=".xlsx") returned 5
	[0048.117] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0048.117] lstrlenW (lpString=".ppt") returned 4
	[0048.117] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0048.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77
	[0048.117] lstrlenW (lpString=".zip") returned 4
	[0048.117] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0048.117] lstrlenW (lpString=".rar") returned 4
	[0048.117] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0048.117] lstrlenW (lpString=".bz2") returned 4
	[0048.117] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0048.117] lstrlenW (lpString=".7z") returned 3
	[0048.117] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0048.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77
	[0048.117] lstrlenW (lpString=".dbf") returned 4
	[0048.117] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0048.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77
	[0048.117] lstrlenW (lpString=".1cd") returned 4
	[0048.118] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0048.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77
	[0048.118] lstrlenW (lpString=".jpg") returned 4
	[0048.118] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0048.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77
	[0048.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77
	[0048.118] lstrlenW (lpString=".doc") returned 4
	[0048.118] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0048.118] lstrlenW (lpString=".docx") returned 5
	[0048.118] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0048.118] lstrlenW (lpString=".pdf") returned 4
	[0048.118] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0048.118] lstrlenW (lpString=".xls") returned 4
	[0048.118] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0048.118] lstrlenW (lpString=".xlsx") returned 5
	[0048.118] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0048.118] lstrlenW (lpString=".ppt") returned 4
	[0048.118] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0048.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77
	[0048.118] lstrlenW (lpString=".zip") returned 4
	[0048.118] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0048.118] lstrlenW (lpString=".rar") returned 4
	[0048.118] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0048.118] lstrlenW (lpString=".bz2") returned 4
	[0048.118] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0048.118] lstrlenW (lpString=".7z") returned 3
	[0048.118] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0048.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77
	[0048.118] lstrlenW (lpString=".dbf") returned 4
	[0048.118] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0048.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77
	[0048.118] lstrlenW (lpString=".1cd") returned 4
	[0048.119] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0048.119] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG") returned 77
	[0048.119] lstrlenW (lpString=".jpg") returned 4
	[0048.119] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0048.119] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0048.119] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0048.119] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0048.253] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1347) returned 1
	[0048.253] CloseHandle (hObject=0x1f8) returned 1
	[0048.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif")) returned 0x20
	[0048.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.254] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0048.254] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.254] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.254] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0048.489] GetLastError () returned 0x0
	[0048.489] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x543, lpOverlapped=0x0) returned 1
	[0048.491] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x550, lpOverlapped=0x0) returned 1
	[0048.492] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.492] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0048.492] SetEndOfFile (hFile=0x1e0) returned 1
	[0048.492] CloseHandle (hObject=0x1e0) returned 1
	[0048.492] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.492] SetEndOfFile (hFile=0x1f8) returned 1
	[0048.493] CloseHandle (hObject=0x1f8) returned 1
	[0048.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0048.493] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif")) returned 1
	[0048.493] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72
	[0048.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72
	[0048.494] lstrlenW (lpString=".doc") returned 4
	[0048.494] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0048.494] lstrlenW (lpString=".docx") returned 5
	[0048.494] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0048.494] lstrlenW (lpString=".pdf") returned 4
	[0048.494] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0048.494] lstrlenW (lpString=".xls") returned 4
	[0048.494] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0048.494] lstrlenW (lpString=".xlsx") returned 5
	[0048.494] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0048.494] lstrlenW (lpString=".ppt") returned 4
	[0048.494] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0048.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72
	[0048.494] lstrlenW (lpString=".zip") returned 4
	[0048.494] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0048.494] lstrlenW (lpString=".rar") returned 4
	[0048.494] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0048.494] lstrlenW (lpString=".bz2") returned 4
	[0048.494] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0048.494] lstrlenW (lpString=".7z") returned 3
	[0048.494] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0048.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72
	[0048.494] lstrlenW (lpString=".dbf") returned 4
	[0048.494] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0048.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72
	[0048.494] lstrlenW (lpString=".1cd") returned 4
	[0048.494] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0048.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72
	[0048.494] lstrlenW (lpString=".jpg") returned 4
	[0048.494] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0048.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72
	[0048.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72
	[0048.495] lstrlenW (lpString=".doc") returned 4
	[0048.495] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0048.495] lstrlenW (lpString=".docx") returned 5
	[0048.495] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0048.495] lstrlenW (lpString=".pdf") returned 4
	[0048.495] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0048.495] lstrlenW (lpString=".xls") returned 4
	[0048.495] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0048.495] lstrlenW (lpString=".xlsx") returned 5
	[0048.495] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0048.495] lstrlenW (lpString=".ppt") returned 4
	[0048.495] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0048.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72
	[0048.495] lstrlenW (lpString=".zip") returned 4
	[0048.495] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0048.495] lstrlenW (lpString=".rar") returned 4
	[0048.495] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0048.495] lstrlenW (lpString=".bz2") returned 4
	[0048.495] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0048.495] lstrlenW (lpString=".7z") returned 3
	[0048.495] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0048.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72
	[0048.495] lstrlenW (lpString=".dbf") returned 4
	[0048.495] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0048.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72
	[0048.495] lstrlenW (lpString=".1cd") returned 4
	[0048.495] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0048.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF") returned 72
	[0048.495] lstrlenW (lpString=".jpg") returned 4
	[0048.495] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0048.496] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0048.496] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0048.496] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0049.086] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=32433) returned 1
	[0049.086] CloseHandle (hObject=0x1f8) returned 1
	[0049.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png")) returned 0x20
	[0049.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.087] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0049.087] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.087] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.087] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0049.087] GetLastError () returned 0x0
	[0049.087] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x7eb1, lpOverlapped=0x0) returned 1
	[0049.091] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x7ec0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x7ec0, lpOverlapped=0x0) returned 1
	[0049.092] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.092] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0049.092] SetEndOfFile (hFile=0x1e0) returned 1
	[0049.092] CloseHandle (hObject=0x1e0) returned 1
	[0049.092] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.092] SetEndOfFile (hFile=0x1f8) returned 1
	[0049.093] CloseHandle (hObject=0x1f8) returned 1
	[0049.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0049.094] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png")) returned 1
	[0049.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77
	[0049.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77
	[0049.094] lstrlenW (lpString=".doc") returned 4
	[0049.094] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0049.094] lstrlenW (lpString=".docx") returned 5
	[0049.094] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0049.094] lstrlenW (lpString=".pdf") returned 4
	[0049.094] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0049.094] lstrlenW (lpString=".xls") returned 4
	[0049.094] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0049.094] lstrlenW (lpString=".xlsx") returned 5
	[0049.094] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0049.094] lstrlenW (lpString=".ppt") returned 4
	[0049.094] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0049.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77
	[0049.094] lstrlenW (lpString=".zip") returned 4
	[0049.094] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0049.094] lstrlenW (lpString=".rar") returned 4
	[0049.094] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0049.095] lstrlenW (lpString=".bz2") returned 4
	[0049.095] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0049.095] lstrlenW (lpString=".7z") returned 3
	[0049.095] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0049.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77
	[0049.095] lstrlenW (lpString=".dbf") returned 4
	[0049.095] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0049.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77
	[0049.095] lstrlenW (lpString=".1cd") returned 4
	[0049.095] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0049.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77
	[0049.095] lstrlenW (lpString=".jpg") returned 4
	[0049.095] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0049.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77
	[0049.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77
	[0049.095] lstrlenW (lpString=".doc") returned 4
	[0049.095] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0049.095] lstrlenW (lpString=".docx") returned 5
	[0049.095] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0049.095] lstrlenW (lpString=".pdf") returned 4
	[0049.095] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0049.095] lstrlenW (lpString=".xls") returned 4
	[0049.095] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0049.095] lstrlenW (lpString=".xlsx") returned 5
	[0049.095] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0049.095] lstrlenW (lpString=".ppt") returned 4
	[0049.095] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0049.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77
	[0049.095] lstrlenW (lpString=".zip") returned 4
	[0049.095] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0049.095] lstrlenW (lpString=".rar") returned 4
	[0049.096] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0049.096] lstrlenW (lpString=".bz2") returned 4
	[0049.096] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0049.096] lstrlenW (lpString=".7z") returned 3
	[0049.096] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0049.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77
	[0049.096] lstrlenW (lpString=".dbf") returned 4
	[0049.096] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0049.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77
	[0049.096] lstrlenW (lpString=".1cd") returned 4
	[0049.096] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0049.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG") returned 77
	[0049.096] lstrlenW (lpString=".jpg") returned 4
	[0049.096] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0049.096] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0049.096] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0049.096] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0049.398] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=60724) returned 1
	[0049.399] CloseHandle (hObject=0x200) returned 1
	[0049.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png")) returned 0x20
	[0049.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.399] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0049.399] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.399] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.399] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0049.399] GetLastError () returned 0x0
	[0049.399] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0xed34, lpOverlapped=0x0) returned 1
	[0049.402] WriteFile (in: hFile=0x194, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xed40, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xed40, lpOverlapped=0x0) returned 1
	[0049.404] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.404] WriteFile (in: hFile=0x194, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0049.404] SetEndOfFile (hFile=0x194) returned 1
	[0049.404] CloseHandle (hObject=0x194) returned 1
	[0049.404] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.404] SetEndOfFile (hFile=0x200) returned 1
	[0049.405] CloseHandle (hObject=0x200) returned 1
	[0049.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0049.406] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png")) returned 1
	[0049.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77
	[0049.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77
	[0049.406] lstrlenW (lpString=".doc") returned 4
	[0049.406] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0049.406] lstrlenW (lpString=".docx") returned 5
	[0049.406] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0049.406] lstrlenW (lpString=".pdf") returned 4
	[0049.406] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0049.406] lstrlenW (lpString=".xls") returned 4
	[0049.406] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0049.406] lstrlenW (lpString=".xlsx") returned 5
	[0049.406] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0049.406] lstrlenW (lpString=".ppt") returned 4
	[0049.406] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0049.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77
	[0049.406] lstrlenW (lpString=".zip") returned 4
	[0049.406] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0049.406] lstrlenW (lpString=".rar") returned 4
	[0049.406] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0049.406] lstrlenW (lpString=".bz2") returned 4
	[0049.406] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0049.406] lstrlenW (lpString=".7z") returned 3
	[0049.406] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0049.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77
	[0049.406] lstrlenW (lpString=".dbf") returned 4
	[0049.407] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0049.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77
	[0049.407] lstrlenW (lpString=".1cd") returned 4
	[0049.407] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0049.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77
	[0049.407] lstrlenW (lpString=".jpg") returned 4
	[0049.407] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0049.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77
	[0049.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77
	[0049.407] lstrlenW (lpString=".doc") returned 4
	[0049.407] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0049.407] lstrlenW (lpString=".docx") returned 5
	[0049.407] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0049.407] lstrlenW (lpString=".pdf") returned 4
	[0049.407] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0049.407] lstrlenW (lpString=".xls") returned 4
	[0049.407] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0049.407] lstrlenW (lpString=".xlsx") returned 5
	[0049.407] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0049.407] lstrlenW (lpString=".ppt") returned 4
	[0049.407] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0049.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77
	[0049.407] lstrlenW (lpString=".zip") returned 4
	[0049.407] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0049.407] lstrlenW (lpString=".rar") returned 4
	[0049.407] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0049.407] lstrlenW (lpString=".bz2") returned 4
	[0049.407] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0049.407] lstrlenW (lpString=".7z") returned 3
	[0049.407] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0049.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77
	[0049.408] lstrlenW (lpString=".dbf") returned 4
	[0049.408] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0049.408] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77
	[0049.408] lstrlenW (lpString=".1cd") returned 4
	[0049.408] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0049.408] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG") returned 77
	[0049.408] lstrlenW (lpString=".jpg") returned 4
	[0049.408] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0049.408] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0049.408] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0049.408] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0049.408] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=5179) returned 1
	[0049.408] CloseHandle (hObject=0x200) returned 1
	[0049.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif")) returned 0x20
	[0049.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.409] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0049.409] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.409] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.409] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0050.483] GetLastError () returned 0x0
	[0050.483] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x143b, lpOverlapped=0x0) returned 1
	[0050.484] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x1440, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x1440, lpOverlapped=0x0) returned 1
	[0050.485] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.485] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0050.485] SetEndOfFile (hFile=0x1e0) returned 1
	[0050.485] CloseHandle (hObject=0x1e0) returned 1
	[0050.486] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.486] SetEndOfFile (hFile=0x200) returned 1
	[0050.487] CloseHandle (hObject=0x200) returned 1
	[0050.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.487] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif")) returned 1
	[0050.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74
	[0050.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74
	[0050.487] lstrlenW (lpString=".doc") returned 4
	[0050.487] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.487] lstrlenW (lpString=".docx") returned 5
	[0050.487] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.487] lstrlenW (lpString=".pdf") returned 4
	[0050.487] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.487] lstrlenW (lpString=".xls") returned 4
	[0050.487] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.487] lstrlenW (lpString=".xlsx") returned 5
	[0050.487] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.487] lstrlenW (lpString=".ppt") returned 4
	[0050.487] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74
	[0050.487] lstrlenW (lpString=".zip") returned 4
	[0050.487] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.488] lstrlenW (lpString=".rar") returned 4
	[0050.488] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.488] lstrlenW (lpString=".bz2") returned 4
	[0050.488] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.488] lstrlenW (lpString=".7z") returned 3
	[0050.488] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74
	[0050.488] lstrlenW (lpString=".dbf") returned 4
	[0050.488] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74
	[0050.488] lstrlenW (lpString=".1cd") returned 4
	[0050.488] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74
	[0050.488] lstrlenW (lpString=".jpg") returned 4
	[0050.488] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74
	[0050.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74
	[0050.488] lstrlenW (lpString=".doc") returned 4
	[0050.488] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.488] lstrlenW (lpString=".docx") returned 5
	[0050.488] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.488] lstrlenW (lpString=".pdf") returned 4
	[0050.488] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.488] lstrlenW (lpString=".xls") returned 4
	[0050.488] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.488] lstrlenW (lpString=".xlsx") returned 5
	[0050.488] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.488] lstrlenW (lpString=".ppt") returned 4
	[0050.488] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74
	[0050.488] lstrlenW (lpString=".zip") returned 4
	[0050.488] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.489] lstrlenW (lpString=".rar") returned 4
	[0050.489] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.489] lstrlenW (lpString=".bz2") returned 4
	[0050.489] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.489] lstrlenW (lpString=".7z") returned 3
	[0050.489] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.489] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74
	[0050.489] lstrlenW (lpString=".dbf") returned 4
	[0050.489] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.489] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74
	[0050.489] lstrlenW (lpString=".1cd") returned 4
	[0050.489] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.489] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF") returned 74
	[0050.489] lstrlenW (lpString=".jpg") returned 4
	[0050.489] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.489] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0050.489] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0050.489] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0050.489] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=2574) returned 1
	[0050.490] CloseHandle (hObject=0x200) returned 1
	[0050.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif")) returned 0x20
	[0050.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.490] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0050.490] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.490] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.490] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0050.525] GetLastError () returned 0x0
	[0050.525] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0xa0e, lpOverlapped=0x0) returned 1
	[0050.526] WriteFile (in: hFile=0x208, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xa10, lpOverlapped=0x0) returned 1
	[0050.527] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.528] WriteFile (in: hFile=0x208, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0050.528] SetEndOfFile (hFile=0x208) returned 1
	[0050.528] CloseHandle (hObject=0x208) returned 1
	[0050.528] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.528] SetEndOfFile (hFile=0x200) returned 1
	[0050.529] CloseHandle (hObject=0x200) returned 1
	[0050.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.529] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif")) returned 1
	[0050.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75
	[0050.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75
	[0050.529] lstrlenW (lpString=".doc") returned 4
	[0050.529] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.529] lstrlenW (lpString=".docx") returned 5
	[0050.529] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.529] lstrlenW (lpString=".pdf") returned 4
	[0050.529] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.529] lstrlenW (lpString=".xls") returned 4
	[0050.529] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.530] lstrlenW (lpString=".xlsx") returned 5
	[0050.530] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.530] lstrlenW (lpString=".ppt") returned 4
	[0050.530] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75
	[0050.530] lstrlenW (lpString=".zip") returned 4
	[0050.530] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.530] lstrlenW (lpString=".rar") returned 4
	[0050.530] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.530] lstrlenW (lpString=".bz2") returned 4
	[0050.530] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.530] lstrlenW (lpString=".7z") returned 3
	[0050.530] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75
	[0050.530] lstrlenW (lpString=".dbf") returned 4
	[0050.530] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75
	[0050.530] lstrlenW (lpString=".1cd") returned 4
	[0050.530] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75
	[0050.530] lstrlenW (lpString=".jpg") returned 4
	[0050.530] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75
	[0050.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75
	[0050.530] lstrlenW (lpString=".doc") returned 4
	[0050.530] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.530] lstrlenW (lpString=".docx") returned 5
	[0050.530] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.530] lstrlenW (lpString=".pdf") returned 4
	[0050.530] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.530] lstrlenW (lpString=".xls") returned 4
	[0050.530] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.531] lstrlenW (lpString=".xlsx") returned 5
	[0050.531] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.531] lstrlenW (lpString=".ppt") returned 4
	[0050.531] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.531] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75
	[0050.531] lstrlenW (lpString=".zip") returned 4
	[0050.531] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.531] lstrlenW (lpString=".rar") returned 4
	[0050.531] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.531] lstrlenW (lpString=".bz2") returned 4
	[0050.531] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.531] lstrlenW (lpString=".7z") returned 3
	[0050.531] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.531] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75
	[0050.531] lstrlenW (lpString=".dbf") returned 4
	[0050.531] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.531] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75
	[0050.531] lstrlenW (lpString=".1cd") returned 4
	[0050.531] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.531] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF") returned 75
	[0050.531] lstrlenW (lpString=".jpg") returned 4
	[0050.531] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.531] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0050.531] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0050.531] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0050.532] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1593) returned 1
	[0050.532] CloseHandle (hObject=0x200) returned 1
	[0050.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif")) returned 0x20
	[0050.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.534] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0050.534] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.534] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.535] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0050.536] GetLastError () returned 0x0
	[0050.536] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x639, lpOverlapped=0x0) returned 1
	[0050.539] WriteFile (in: hFile=0x208, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x640, lpOverlapped=0x0) returned 1
	[0050.540] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.540] WriteFile (in: hFile=0x208, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0050.540] SetEndOfFile (hFile=0x208) returned 1
	[0050.540] CloseHandle (hObject=0x208) returned 1
	[0050.540] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.540] SetEndOfFile (hFile=0x200) returned 1
	[0050.541] CloseHandle (hObject=0x200) returned 1
	[0050.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.541] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif")) returned 1
	[0050.541] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73
	[0050.541] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73
	[0050.542] lstrlenW (lpString=".doc") returned 4
	[0050.542] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.542] lstrlenW (lpString=".docx") returned 5
	[0050.542] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.542] lstrlenW (lpString=".pdf") returned 4
	[0050.542] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.542] lstrlenW (lpString=".xls") returned 4
	[0050.542] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.542] lstrlenW (lpString=".xlsx") returned 5
	[0050.542] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.542] lstrlenW (lpString=".ppt") returned 4
	[0050.542] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.542] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73
	[0050.542] lstrlenW (lpString=".zip") returned 4
	[0050.542] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.542] lstrlenW (lpString=".rar") returned 4
	[0050.542] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.542] lstrlenW (lpString=".bz2") returned 4
	[0050.542] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.542] lstrlenW (lpString=".7z") returned 3
	[0050.542] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.542] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73
	[0050.542] lstrlenW (lpString=".dbf") returned 4
	[0050.542] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.542] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73
	[0050.542] lstrlenW (lpString=".1cd") returned 4
	[0050.542] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.542] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73
	[0050.542] lstrlenW (lpString=".jpg") returned 4
	[0050.542] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.542] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73
	[0050.542] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73
	[0050.542] lstrlenW (lpString=".doc") returned 4
	[0050.543] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.543] lstrlenW (lpString=".docx") returned 5
	[0050.543] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.543] lstrlenW (lpString=".pdf") returned 4
	[0050.543] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.543] lstrlenW (lpString=".xls") returned 4
	[0050.543] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.543] lstrlenW (lpString=".xlsx") returned 5
	[0050.543] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.543] lstrlenW (lpString=".ppt") returned 4
	[0050.543] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.543] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73
	[0050.543] lstrlenW (lpString=".zip") returned 4
	[0050.543] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.543] lstrlenW (lpString=".rar") returned 4
	[0050.543] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.543] lstrlenW (lpString=".bz2") returned 4
	[0050.543] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.543] lstrlenW (lpString=".7z") returned 3
	[0050.543] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.543] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73
	[0050.543] lstrlenW (lpString=".dbf") returned 4
	[0050.543] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.543] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73
	[0050.543] lstrlenW (lpString=".1cd") returned 4
	[0050.543] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.543] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF") returned 73
	[0050.543] lstrlenW (lpString=".jpg") returned 4
	[0050.543] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.544] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0050.544] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0050.544] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0050.545] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=21745) returned 1
	[0050.545] CloseHandle (hObject=0x200) returned 1
	[0050.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png")) returned 0x20
	[0050.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.545] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0050.545] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.545] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.545] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0050.545] GetLastError () returned 0x0
	[0050.545] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x54f1, lpOverlapped=0x0) returned 1
	[0050.547] WriteFile (in: hFile=0x208, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x5500, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x5500, lpOverlapped=0x0) returned 1
	[0050.548] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.548] WriteFile (in: hFile=0x208, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0050.548] SetEndOfFile (hFile=0x208) returned 1
	[0050.549] CloseHandle (hObject=0x208) returned 1
	[0050.549] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.549] SetEndOfFile (hFile=0x200) returned 1
	[0050.550] CloseHandle (hObject=0x200) returned 1
	[0050.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.550] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png")) returned 1
	[0050.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74
	[0050.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74
	[0050.550] lstrlenW (lpString=".doc") returned 4
	[0050.550] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.550] lstrlenW (lpString=".docx") returned 5
	[0050.550] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.550] lstrlenW (lpString=".pdf") returned 4
	[0050.550] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.550] lstrlenW (lpString=".xls") returned 4
	[0050.550] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.550] lstrlenW (lpString=".xlsx") returned 5
	[0050.550] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.550] lstrlenW (lpString=".ppt") returned 4
	[0050.550] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74
	[0050.551] lstrlenW (lpString=".zip") returned 4
	[0050.551] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.551] lstrlenW (lpString=".rar") returned 4
	[0050.551] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.551] lstrlenW (lpString=".bz2") returned 4
	[0050.551] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.551] lstrlenW (lpString=".7z") returned 3
	[0050.551] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74
	[0050.551] lstrlenW (lpString=".dbf") returned 4
	[0050.551] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74
	[0050.551] lstrlenW (lpString=".1cd") returned 4
	[0050.551] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74
	[0050.551] lstrlenW (lpString=".jpg") returned 4
	[0050.551] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74
	[0050.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74
	[0050.551] lstrlenW (lpString=".doc") returned 4
	[0050.551] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.551] lstrlenW (lpString=".docx") returned 5
	[0050.551] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.551] lstrlenW (lpString=".pdf") returned 4
	[0050.551] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.551] lstrlenW (lpString=".xls") returned 4
	[0050.551] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.551] lstrlenW (lpString=".xlsx") returned 5
	[0050.551] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.552] lstrlenW (lpString=".ppt") returned 4
	[0050.552] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.552] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74
	[0050.552] lstrlenW (lpString=".zip") returned 4
	[0050.552] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.552] lstrlenW (lpString=".rar") returned 4
	[0050.552] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.552] lstrlenW (lpString=".bz2") returned 4
	[0050.552] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.552] lstrlenW (lpString=".7z") returned 3
	[0050.552] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.552] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74
	[0050.552] lstrlenW (lpString=".dbf") returned 4
	[0050.552] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.552] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74
	[0050.552] lstrlenW (lpString=".1cd") returned 4
	[0050.552] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.552] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG") returned 74
	[0050.552] lstrlenW (lpString=".jpg") returned 4
	[0050.552] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.552] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0050.552] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0050.552] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0050.553] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1339) returned 1
	[0050.553] CloseHandle (hObject=0x200) returned 1
	[0050.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif")) returned 0x20
	[0050.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.553] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0050.553] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.553] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.553] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0050.875] GetLastError () returned 0x0
	[0050.875] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x53b, lpOverlapped=0x0) returned 1
	[0050.883] WriteFile (in: hFile=0x21c, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x540, lpOverlapped=0x0) returned 1
	[0050.884] ReadFile (in: hFile=0x200, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.885] WriteFile (in: hFile=0x21c, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0050.885] SetEndOfFile (hFile=0x21c) returned 1
	[0050.885] CloseHandle (hObject=0x21c) returned 1
	[0050.885] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.885] SetEndOfFile (hFile=0x200) returned 1
	[0050.886] CloseHandle (hObject=0x200) returned 1
	[0050.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.886] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif")) returned 1
	[0050.886] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75
	[0050.886] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75
	[0050.886] lstrlenW (lpString=".doc") returned 4
	[0050.887] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.887] lstrlenW (lpString=".docx") returned 5
	[0050.887] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.887] lstrlenW (lpString=".pdf") returned 4
	[0050.887] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.887] lstrlenW (lpString=".xls") returned 4
	[0050.887] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.887] lstrlenW (lpString=".xlsx") returned 5
	[0050.887] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.887] lstrlenW (lpString=".ppt") returned 4
	[0050.887] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.887] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75
	[0050.887] lstrlenW (lpString=".zip") returned 4
	[0050.887] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.887] lstrlenW (lpString=".rar") returned 4
	[0050.887] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.887] lstrlenW (lpString=".bz2") returned 4
	[0050.887] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.887] lstrlenW (lpString=".7z") returned 3
	[0050.887] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.887] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75
	[0050.887] lstrlenW (lpString=".dbf") returned 4
	[0050.887] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.887] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75
	[0050.887] lstrlenW (lpString=".1cd") returned 4
	[0050.887] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.887] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75
	[0050.887] lstrlenW (lpString=".jpg") returned 4
	[0050.887] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.887] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75
	[0050.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75
	[0050.888] lstrlenW (lpString=".doc") returned 4
	[0050.888] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.888] lstrlenW (lpString=".docx") returned 5
	[0050.888] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.888] lstrlenW (lpString=".pdf") returned 4
	[0050.888] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.888] lstrlenW (lpString=".xls") returned 4
	[0050.888] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.888] lstrlenW (lpString=".xlsx") returned 5
	[0050.888] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.888] lstrlenW (lpString=".ppt") returned 4
	[0050.888] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75
	[0050.888] lstrlenW (lpString=".zip") returned 4
	[0050.888] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.888] lstrlenW (lpString=".rar") returned 4
	[0050.888] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.888] lstrlenW (lpString=".bz2") returned 4
	[0050.888] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.888] lstrlenW (lpString=".7z") returned 3
	[0050.888] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75
	[0050.888] lstrlenW (lpString=".dbf") returned 4
	[0050.888] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75
	[0050.888] lstrlenW (lpString=".1cd") returned 4
	[0050.888] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF") returned 75
	[0050.888] lstrlenW (lpString=".jpg") returned 4
	[0050.888] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.889] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0050.889] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0050.889] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0051.586] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=15737) returned 1
	[0051.586] CloseHandle (hObject=0x21c) returned 1
	[0051.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png")) returned 0x20
	[0051.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.586] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0051.586] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.586] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.586] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0051.587] GetLastError () returned 0x0
	[0051.587] ReadFile (in: hFile=0x21c, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x3d79, lpOverlapped=0x0) returned 1
	[0051.825] WriteFile (in: hFile=0x228, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x3d80, lpOverlapped=0x0) returned 1
	[0051.826] ReadFile (in: hFile=0x21c, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.826] WriteFile (in: hFile=0x228, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0051.826] SetEndOfFile (hFile=0x228) returned 1
	[0051.826] CloseHandle (hObject=0x228) returned 1
	[0051.826] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.826] SetEndOfFile (hFile=0x21c) returned 1
	[0051.827] CloseHandle (hObject=0x21c) returned 1
	[0051.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.827] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png")) returned 1
	[0051.827] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76
	[0051.827] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76
	[0051.827] lstrlenW (lpString=".doc") returned 4
	[0051.828] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.828] lstrlenW (lpString=".docx") returned 5
	[0051.828] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.828] lstrlenW (lpString=".pdf") returned 4
	[0051.828] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.828] lstrlenW (lpString=".xls") returned 4
	[0051.828] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.828] lstrlenW (lpString=".xlsx") returned 5
	[0051.828] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.828] lstrlenW (lpString=".ppt") returned 4
	[0051.828] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76
	[0051.828] lstrlenW (lpString=".zip") returned 4
	[0051.828] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.828] lstrlenW (lpString=".rar") returned 4
	[0051.828] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.828] lstrlenW (lpString=".bz2") returned 4
	[0051.828] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.828] lstrlenW (lpString=".7z") returned 3
	[0051.828] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76
	[0051.828] lstrlenW (lpString=".dbf") returned 4
	[0051.828] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76
	[0051.828] lstrlenW (lpString=".1cd") returned 4
	[0051.828] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76
	[0051.828] lstrlenW (lpString=".jpg") returned 4
	[0051.828] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76
	[0051.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76
	[0051.828] lstrlenW (lpString=".doc") returned 4
	[0051.829] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.829] lstrlenW (lpString=".docx") returned 5
	[0051.829] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.829] lstrlenW (lpString=".pdf") returned 4
	[0051.829] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.829] lstrlenW (lpString=".xls") returned 4
	[0051.829] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.829] lstrlenW (lpString=".xlsx") returned 5
	[0051.829] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.829] lstrlenW (lpString=".ppt") returned 4
	[0051.829] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76
	[0051.829] lstrlenW (lpString=".zip") returned 4
	[0051.830] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.830] lstrlenW (lpString=".rar") returned 4
	[0051.830] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.830] lstrlenW (lpString=".bz2") returned 4
	[0051.830] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.830] lstrlenW (lpString=".7z") returned 3
	[0051.830] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76
	[0051.830] lstrlenW (lpString=".dbf") returned 4
	[0051.830] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76
	[0051.830] lstrlenW (lpString=".1cd") returned 4
	[0051.830] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG") returned 76
	[0051.830] lstrlenW (lpString=".jpg") returned 4
	[0051.830] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.830] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0051.830] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0051.831] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0051.831] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=2527) returned 1
	[0051.831] CloseHandle (hObject=0x21c) returned 1
	[0051.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif")) returned 0x20
	[0051.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.831] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0051.831] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.831] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.832] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.877] GetLastError () returned 0x0
	[0051.877] ReadFile (in: hFile=0x21c, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x9df, lpOverlapped=0x0) returned 1
	[0051.879] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x9e0, lpOverlapped=0x0) returned 1
	[0051.880] ReadFile (in: hFile=0x21c, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.880] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0051.880] SetEndOfFile (hFile=0x1e0) returned 1
	[0051.880] CloseHandle (hObject=0x1e0) returned 1
	[0051.881] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.881] SetEndOfFile (hFile=0x21c) returned 1
	[0051.881] CloseHandle (hObject=0x21c) returned 1
	[0051.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.882] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif")) returned 1
	[0051.882] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74
	[0051.882] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74
	[0051.882] lstrlenW (lpString=".doc") returned 4
	[0051.882] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.882] lstrlenW (lpString=".docx") returned 5
	[0051.882] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.882] lstrlenW (lpString=".pdf") returned 4
	[0051.882] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.882] lstrlenW (lpString=".xls") returned 4
	[0051.882] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.882] lstrlenW (lpString=".xlsx") returned 5
	[0051.882] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.882] lstrlenW (lpString=".ppt") returned 4
	[0051.882] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.882] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74
	[0051.882] lstrlenW (lpString=".zip") returned 4
	[0051.883] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.883] lstrlenW (lpString=".rar") returned 4
	[0051.883] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.883] lstrlenW (lpString=".bz2") returned 4
	[0051.883] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.883] lstrlenW (lpString=".7z") returned 3
	[0051.883] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.883] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74
	[0051.883] lstrlenW (lpString=".dbf") returned 4
	[0051.883] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.883] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74
	[0051.883] lstrlenW (lpString=".1cd") returned 4
	[0051.883] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.883] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74
	[0051.883] lstrlenW (lpString=".jpg") returned 4
	[0051.883] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.883] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74
	[0051.883] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74
	[0051.883] lstrlenW (lpString=".doc") returned 4
	[0051.883] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.883] lstrlenW (lpString=".docx") returned 5
	[0051.883] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.883] lstrlenW (lpString=".pdf") returned 4
	[0051.883] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.883] lstrlenW (lpString=".xls") returned 4
	[0051.883] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.883] lstrlenW (lpString=".xlsx") returned 5
	[0051.883] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.883] lstrlenW (lpString=".ppt") returned 4
	[0051.883] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.883] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74
	[0051.883] lstrlenW (lpString=".zip") returned 4
	[0051.884] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.884] lstrlenW (lpString=".rar") returned 4
	[0051.884] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.884] lstrlenW (lpString=".bz2") returned 4
	[0051.884] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.884] lstrlenW (lpString=".7z") returned 3
	[0051.884] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.884] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74
	[0051.884] lstrlenW (lpString=".dbf") returned 4
	[0051.884] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.884] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74
	[0051.884] lstrlenW (lpString=".1cd") returned 4
	[0051.884] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.884] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF") returned 74
	[0051.884] lstrlenW (lpString=".jpg") returned 4
	[0051.884] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.884] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0051.884] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0051.884] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0051.885] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=1737) returned 1
	[0051.885] CloseHandle (hObject=0x21c) returned 1
	[0051.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif")) returned 0x20
	[0051.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.885] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0051.885] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.885] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.885] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.887] GetLastError () returned 0x0
	[0051.887] ReadFile (in: hFile=0x21c, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x6c9, lpOverlapped=0x0) returned 1
	[0051.890] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x6d0, lpOverlapped=0x0) returned 1
	[0051.890] ReadFile (in: hFile=0x21c, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.890] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0051.891] SetEndOfFile (hFile=0x1e0) returned 1
	[0051.891] CloseHandle (hObject=0x1e0) returned 1
	[0051.891] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.891] SetEndOfFile (hFile=0x21c) returned 1
	[0051.894] CloseHandle (hObject=0x21c) returned 1
	[0051.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.895] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif")) returned 1
	[0051.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76
	[0051.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76
	[0051.895] lstrlenW (lpString=".doc") returned 4
	[0051.895] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.895] lstrlenW (lpString=".docx") returned 5
	[0051.895] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.895] lstrlenW (lpString=".pdf") returned 4
	[0051.895] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.895] lstrlenW (lpString=".xls") returned 4
	[0051.895] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.895] lstrlenW (lpString=".xlsx") returned 5
	[0051.895] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.895] lstrlenW (lpString=".ppt") returned 4
	[0051.895] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76
	[0051.895] lstrlenW (lpString=".zip") returned 4
	[0051.895] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.895] lstrlenW (lpString=".rar") returned 4
	[0051.895] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.895] lstrlenW (lpString=".bz2") returned 4
	[0051.895] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.896] lstrlenW (lpString=".7z") returned 3
	[0051.896] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76
	[0051.896] lstrlenW (lpString=".dbf") returned 4
	[0051.896] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76
	[0051.896] lstrlenW (lpString=".1cd") returned 4
	[0051.896] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76
	[0051.896] lstrlenW (lpString=".jpg") returned 4
	[0051.896] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76
	[0051.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76
	[0051.896] lstrlenW (lpString=".doc") returned 4
	[0051.896] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.896] lstrlenW (lpString=".docx") returned 5
	[0051.896] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.896] lstrlenW (lpString=".pdf") returned 4
	[0051.896] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.896] lstrlenW (lpString=".xls") returned 4
	[0051.896] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.896] lstrlenW (lpString=".xlsx") returned 5
	[0051.896] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.896] lstrlenW (lpString=".ppt") returned 4
	[0051.896] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76
	[0051.896] lstrlenW (lpString=".zip") returned 4
	[0051.896] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.896] lstrlenW (lpString=".rar") returned 4
	[0051.896] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.896] lstrlenW (lpString=".bz2") returned 4
	[0051.897] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.897] lstrlenW (lpString=".7z") returned 3
	[0051.897] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.897] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76
	[0051.897] lstrlenW (lpString=".dbf") returned 4
	[0051.897] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.897] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76
	[0051.897] lstrlenW (lpString=".1cd") returned 4
	[0051.897] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.897] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF") returned 76
	[0051.897] lstrlenW (lpString=".jpg") returned 4
	[0051.897] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.897] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0051.897] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0051.897] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0051.897] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=33479) returned 1
	[0051.897] CloseHandle (hObject=0x21c) returned 1
	[0051.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png")) returned 0x20
	[0051.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.898] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0051.898] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.898] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.898] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.898] GetLastError () returned 0x0
	[0051.898] ReadFile (in: hFile=0x21c, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x82c7, lpOverlapped=0x0) returned 1
	[0052.436] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x82d0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x82d0, lpOverlapped=0x0) returned 1
	[0052.560] ReadFile (in: hFile=0x21c, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.560] WriteFile (in: hFile=0x1e0, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0052.560] SetEndOfFile (hFile=0x1e0) returned 1
	[0052.560] CloseHandle (hObject=0x1e0) returned 1
	[0052.561] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.561] SetEndOfFile (hFile=0x21c) returned 1
	[0052.562] CloseHandle (hObject=0x21c) returned 1
	[0052.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.562] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png")) returned 1
	[0052.562] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77
	[0052.562] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77
	[0052.562] lstrlenW (lpString=".doc") returned 4
	[0052.562] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.562] lstrlenW (lpString=".docx") returned 5
	[0052.562] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.562] lstrlenW (lpString=".pdf") returned 4
	[0052.562] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.562] lstrlenW (lpString=".xls") returned 4
	[0052.562] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.562] lstrlenW (lpString=".xlsx") returned 5
	[0052.562] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.562] lstrlenW (lpString=".ppt") returned 4
	[0052.563] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77
	[0052.563] lstrlenW (lpString=".zip") returned 4
	[0052.563] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.563] lstrlenW (lpString=".rar") returned 4
	[0052.563] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.563] lstrlenW (lpString=".bz2") returned 4
	[0052.563] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.563] lstrlenW (lpString=".7z") returned 3
	[0052.563] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77
	[0052.563] lstrlenW (lpString=".dbf") returned 4
	[0052.563] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77
	[0052.563] lstrlenW (lpString=".1cd") returned 4
	[0052.563] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77
	[0052.563] lstrlenW (lpString=".jpg") returned 4
	[0052.563] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77
	[0052.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77
	[0052.563] lstrlenW (lpString=".doc") returned 4
	[0052.563] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.563] lstrlenW (lpString=".docx") returned 5
	[0052.563] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.563] lstrlenW (lpString=".pdf") returned 4
	[0052.563] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.563] lstrlenW (lpString=".xls") returned 4
	[0052.563] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.563] lstrlenW (lpString=".xlsx") returned 5
	[0052.563] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.563] lstrlenW (lpString=".ppt") returned 4
	[0052.564] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77
	[0052.564] lstrlenW (lpString=".zip") returned 4
	[0052.564] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.564] lstrlenW (lpString=".rar") returned 4
	[0052.564] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.564] lstrlenW (lpString=".bz2") returned 4
	[0052.564] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.564] lstrlenW (lpString=".7z") returned 3
	[0052.564] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77
	[0052.564] lstrlenW (lpString=".dbf") returned 4
	[0052.564] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77
	[0052.564] lstrlenW (lpString=".1cd") returned 4
	[0052.564] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG") returned 77
	[0052.564] lstrlenW (lpString=".jpg") returned 4
	[0052.564] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.564] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0052.564] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0052.564] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0052.847] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=42453) returned 1
	[0052.847] CloseHandle (hObject=0x1e8) returned 1
	[0052.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png")) returned 0x20
	[0052.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.847] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0052.862] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.871] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.871] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0052.871] GetLastError () returned 0x0
	[0052.871] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0xa5d5, lpOverlapped=0x0) returned 1
	[0052.980] WriteFile (in: hFile=0x1d8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xa5e0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xa5e0, lpOverlapped=0x0) returned 1
	[0052.984] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.984] WriteFile (in: hFile=0x1d8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0052.984] SetEndOfFile (hFile=0x1d8) returned 1
	[0052.984] CloseHandle (hObject=0x1d8) returned 1
	[0052.984] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.984] SetEndOfFile (hFile=0x1e8) returned 1
	[0052.986] CloseHandle (hObject=0x1e8) returned 1
	[0052.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.989] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png")) returned 1
	[0052.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74
	[0052.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74
	[0052.989] lstrlenW (lpString=".doc") returned 4
	[0052.989] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.989] lstrlenW (lpString=".docx") returned 5
	[0052.989] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.989] lstrlenW (lpString=".pdf") returned 4
	[0052.989] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.989] lstrlenW (lpString=".xls") returned 4
	[0052.989] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.989] lstrlenW (lpString=".xlsx") returned 5
	[0052.989] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.989] lstrlenW (lpString=".ppt") returned 4
	[0052.989] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74
	[0052.989] lstrlenW (lpString=".zip") returned 4
	[0052.989] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.989] lstrlenW (lpString=".rar") returned 4
	[0052.989] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.989] lstrlenW (lpString=".bz2") returned 4
	[0052.989] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.989] lstrlenW (lpString=".7z") returned 3
	[0052.989] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74
	[0052.989] lstrlenW (lpString=".dbf") returned 4
	[0052.990] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74
	[0052.990] lstrlenW (lpString=".1cd") returned 4
	[0052.990] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74
	[0052.990] lstrlenW (lpString=".jpg") returned 4
	[0052.990] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74
	[0052.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74
	[0052.990] lstrlenW (lpString=".doc") returned 4
	[0052.990] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.990] lstrlenW (lpString=".docx") returned 5
	[0052.990] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.990] lstrlenW (lpString=".pdf") returned 4
	[0052.990] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.990] lstrlenW (lpString=".xls") returned 4
	[0052.990] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.990] lstrlenW (lpString=".xlsx") returned 5
	[0052.990] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.990] lstrlenW (lpString=".ppt") returned 4
	[0052.990] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74
	[0052.990] lstrlenW (lpString=".zip") returned 4
	[0052.991] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.991] lstrlenW (lpString=".rar") returned 4
	[0052.991] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.991] lstrlenW (lpString=".bz2") returned 4
	[0052.991] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.991] lstrlenW (lpString=".7z") returned 3
	[0052.991] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74
	[0052.991] lstrlenW (lpString=".dbf") returned 4
	[0052.991] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74
	[0052.991] lstrlenW (lpString=".1cd") returned 4
	[0052.991] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG") returned 74
	[0052.991] lstrlenW (lpString=".jpg") returned 4
	[0052.991] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.991] lstrcmpiW (lpString1=".inc", lpString2=".beets") returned 1
	[0052.991] lstrlenW (lpString="adojavas.inc") returned 12
	[0052.991] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0053.019] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=14610) returned 1
	[0053.019] CloseHandle (hObject=0x1e8) returned 1
	[0053.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20
	[0053.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0053.019] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0053.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0053.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0053.020] lstrlenW (lpString=".doc") returned 4
	[0053.020] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0053.020] lstrlenW (lpString=".docx") returned 5
	[0053.020] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0053.020] lstrlenW (lpString=".pdf") returned 4
	[0053.020] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0053.020] lstrlenW (lpString=".xls") returned 4
	[0053.020] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0053.020] lstrlenW (lpString=".xlsx") returned 5
	[0053.020] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0053.020] lstrlenW (lpString=".ppt") returned 4
	[0053.020] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0053.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0053.020] lstrlenW (lpString=".zip") returned 4
	[0053.020] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0053.020] lstrlenW (lpString=".rar") returned 4
	[0053.020] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0053.020] lstrlenW (lpString=".bz2") returned 4
	[0053.020] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0053.020] lstrlenW (lpString=".7z") returned 3
	[0053.020] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0053.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0053.020] lstrlenW (lpString=".dbf") returned 4
	[0053.020] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0053.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0053.020] lstrlenW (lpString=".1cd") returned 4
	[0053.020] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0053.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0053.020] lstrlenW (lpString=".jpg") returned 4
	[0053.020] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0053.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0053.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0053.021] lstrlenW (lpString=".doc") returned 4
	[0053.021] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0053.021] lstrlenW (lpString=".docx") returned 5
	[0053.021] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0053.021] lstrlenW (lpString=".pdf") returned 4
	[0053.021] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0053.021] lstrlenW (lpString=".xls") returned 4
	[0053.021] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0053.021] lstrlenW (lpString=".xlsx") returned 5
	[0053.021] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0053.021] lstrlenW (lpString=".ppt") returned 4
	[0053.021] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0053.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0053.021] lstrlenW (lpString=".zip") returned 4
	[0053.021] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0053.021] lstrlenW (lpString=".rar") returned 4
	[0053.021] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0053.021] lstrlenW (lpString=".bz2") returned 4
	[0053.021] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0053.021] lstrlenW (lpString=".7z") returned 3
	[0053.021] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0053.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0053.021] lstrlenW (lpString=".dbf") returned 4
	[0053.021] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0053.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0053.021] lstrlenW (lpString=".1cd") returned 4
	[0053.021] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0053.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0053.021] lstrlenW (lpString=".jpg") returned 4
	[0053.021] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0053.026] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.026] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.026] CreateFileW (lpFileName="C:\\Program Files\\desktop.ini.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\desktop.ini.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0053.027] GetLastError () returned 0x0
	[0053.027] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0xae, lpOverlapped=0x0) returned 1
	[0053.027] WriteFile (in: hFile=0x1d8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xb0, lpOverlapped=0x0) returned 1
	[0053.028] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0053.028] WriteFile (in: hFile=0x1d8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0053.028] SetEndOfFile (hFile=0x1d8) returned 1
	[0053.028] CloseHandle (hObject=0x1d8) returned 1
	[0053.029] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.029] SetEndOfFile (hFile=0x1e8) returned 1
	[0053.029] CloseHandle (hObject=0x1e8) returned 1
	[0053.030] SetFileAttributesW (lpFileName="C:\\Program Files\\desktop.ini.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x26) returned 1
	[0053.030] DeleteFileW (lpFileName="C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 1
	[0053.030] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0053.030] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0053.030] lstrlenW (lpString=".doc") returned 4
	[0053.030] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0053.030] lstrlenW (lpString=".docx") returned 5
	[0053.030] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0053.030] lstrlenW (lpString=".pdf") returned 4
	[0053.030] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0053.030] lstrlenW (lpString=".xls") returned 4
	[0053.030] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0053.030] lstrlenW (lpString=".xlsx") returned 5
	[0053.031] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0053.031] lstrlenW (lpString=".ppt") returned 4
	[0053.031] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0053.031] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0053.031] lstrlenW (lpString=".zip") returned 4
	[0053.031] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0053.031] lstrlenW (lpString=".rar") returned 4
	[0053.031] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0053.031] lstrlenW (lpString=".bz2") returned 4
	[0053.031] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0053.031] lstrlenW (lpString=".7z") returned 3
	[0053.031] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0053.031] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0053.031] lstrlenW (lpString=".dbf") returned 4
	[0053.031] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0053.031] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0053.031] lstrlenW (lpString=".1cd") returned 4
	[0053.031] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0053.031] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0053.031] lstrlenW (lpString=".jpg") returned 4
	[0053.031] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0057.375] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.375] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0057.375] GetLastError () returned 0x0
	[0057.375] ReadFile (in: hFile=0x1e4, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x4932, lpOverlapped=0x0) returned 1
	[0057.379] WriteFile (in: hFile=0x224, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x4940, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x4940, lpOverlapped=0x0) returned 1
	[0057.380] ReadFile (in: hFile=0x1e4, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.380] WriteFile (in: hFile=0x224, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe4, lpOverlapped=0x0) returned 1
	[0057.381] SetEndOfFile (hFile=0x224) returned 1
	[0057.381] CloseHandle (hObject=0x224) returned 1
	[0057.381] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.381] SetEndOfFile (hFile=0x1e4) returned 1
	[0057.382] CloseHandle (hObject=0x1e4) returned 1
	[0057.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.382] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 1
	[0057.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76
	[0057.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76
	[0057.382] lstrlenW (lpString=".doc") returned 4
	[0057.382] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1
	[0057.382] lstrlenW (lpString=".docx") returned 5
	[0057.382] lstrcmpiW (lpString1=".docx", lpString2="0.xsl") returned -1
	[0057.382] lstrlenW (lpString=".pdf") returned 4
	[0057.383] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1
	[0057.383] lstrlenW (lpString=".xls") returned 4
	[0057.383] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1
	[0057.383] lstrlenW (lpString=".xlsx") returned 5
	[0057.383] lstrcmpiW (lpString1=".xlsx", lpString2="0.xsl") returned -1
	[0057.383] lstrlenW (lpString=".ppt") returned 4
	[0057.383] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1
	[0057.383] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76
	[0057.383] lstrlenW (lpString=".zip") returned 4
	[0057.383] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1
	[0057.383] lstrlenW (lpString=".rar") returned 4
	[0057.383] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1
	[0057.383] lstrlenW (lpString=".bz2") returned 4
	[0057.383] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1
	[0057.383] lstrlenW (lpString=".7z") returned 3
	[0057.383] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1
	[0057.383] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76
	[0057.383] lstrlenW (lpString=".dbf") returned 4
	[0057.383] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1
	[0057.383] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76
	[0057.383] lstrlenW (lpString=".1cd") returned 4
	[0057.383] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1
	[0057.383] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned 76
	[0057.383] lstrlenW (lpString=".jpg") returned 4
	[0057.383] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1
	[0057.384] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.384] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0057.385] GetLastError () returned 0x0
	[0057.385] ReadFile (in: hFile=0x1b0, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x745e, lpOverlapped=0x0) returned 1
	[0057.387] WriteFile (in: hFile=0x1e4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x7460, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x7460, lpOverlapped=0x0) returned 1
	[0057.388] ReadFile (in: hFile=0x1b0, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.388] WriteFile (in: hFile=0x1e4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0057.388] SetEndOfFile (hFile=0x1e4) returned 1
	[0057.388] CloseHandle (hObject=0x1e4) returned 1
	[0057.389] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.389] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.390] CloseHandle (hObject=0x1b0) returned 1
	[0057.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.390] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 1
	[0057.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned 78
	[0057.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned 78
	[0057.390] lstrlenW (lpString=".doc") returned 4
	[0057.390] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1
	[0057.390] lstrlenW (lpString=".docx") returned 5
	[0057.390] lstrcmpiW (lpString1=".docx", lpString2="e.xsl") returned -1
	[0057.390] lstrlenW (lpString=".pdf") returned 4
	[0057.390] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1
	[0057.390] lstrlenW (lpString=".xls") returned 4
	[0057.390] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1
	[0057.390] lstrlenW (lpString=".xlsx") returned 5
	[0057.390] lstrcmpiW (lpString1=".xlsx", lpString2="e.xsl") returned -1
	[0057.390] lstrlenW (lpString=".ppt") returned 4
	[0057.390] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1
	[0057.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned 78
	[0057.391] lstrlenW (lpString=".zip") returned 4
	[0057.391] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1
	[0057.391] lstrlenW (lpString=".rar") returned 4
	[0057.391] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1
	[0057.391] lstrlenW (lpString=".bz2") returned 4
	[0057.391] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1
	[0057.391] lstrlenW (lpString=".7z") returned 3
	[0057.391] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1
	[0057.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned 78
	[0057.391] lstrlenW (lpString=".dbf") returned 4
	[0057.391] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1
	[0057.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned 78
	[0057.391] lstrlenW (lpString=".1cd") returned 4
	[0057.391] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1
	[0057.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned 78
	[0057.391] lstrlenW (lpString=".jpg") returned 4
	[0057.391] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1
	[0057.393] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.393] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0057.393] GetLastError () returned 0x0
	[0057.393] ReadFile (in: hFile=0x1b0, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x2340, lpOverlapped=0x0) returned 1
	[0057.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x2350, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x2350, lpOverlapped=0x0) returned 1
	[0057.439] ReadFile (in: hFile=0x1b0, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.439] WriteFile (in: hFile=0x1e4, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.439] SetEndOfFile (hFile=0x1e4) returned 1
	[0057.439] CloseHandle (hObject=0x1e4) returned 1
	[0057.439] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.439] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.440] CloseHandle (hObject=0x1b0) returned 1
	[0057.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.441] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif")) returned 1
	[0057.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 63
	[0057.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 63
	[0057.734] lstrlenW (lpString=".doc") returned 4
	[0057.734] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.734] lstrlenW (lpString=".docx") returned 5
	[0057.734] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.735] lstrlenW (lpString=".pdf") returned 4
	[0057.735] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.735] lstrlenW (lpString=".xls") returned 4
	[0057.735] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.735] lstrlenW (lpString=".xlsx") returned 5
	[0057.735] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.735] lstrlenW (lpString=".ppt") returned 4
	[0057.735] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 63
	[0057.735] lstrlenW (lpString=".zip") returned 4
	[0057.735] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.735] lstrlenW (lpString=".rar") returned 4
	[0057.735] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.735] lstrlenW (lpString=".bz2") returned 4
	[0057.735] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.735] lstrlenW (lpString=".7z") returned 3
	[0057.735] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 63
	[0057.735] lstrlenW (lpString=".dbf") returned 4
	[0057.735] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 63
	[0057.735] lstrlenW (lpString=".1cd") returned 4
	[0057.735] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 63
	[0057.735] lstrlenW (lpString=".jpg") returned 4
	[0057.735] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0058.655] GetLastError () returned 0x0
	[0058.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x296f, lpOverlapped=0x0) returned 1
	[0058.657] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x2970, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x2970, lpOverlapped=0x0) returned 1
	[0058.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.658] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.658] SetEndOfFile (hFile=0x1bc) returned 1
	[0058.659] CloseHandle (hObject=0x1bc) returned 1
	[0058.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.659] SetEndOfFile (hFile=0x1ec) returned 1
	[0058.660] CloseHandle (hObject=0x1ec) returned 1
	[0058.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.660] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif")) returned 1
	[0058.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 63
	[0058.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 63
	[0058.660] lstrlenW (lpString=".doc") returned 4
	[0058.660] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.660] lstrlenW (lpString=".docx") returned 5
	[0058.660] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.660] lstrlenW (lpString=".pdf") returned 4
	[0058.660] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.660] lstrlenW (lpString=".xls") returned 4
	[0058.660] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.660] lstrlenW (lpString=".xlsx") returned 5
	[0058.660] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.660] lstrlenW (lpString=".ppt") returned 4
	[0058.661] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 63
	[0058.661] lstrlenW (lpString=".zip") returned 4
	[0058.661] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.661] lstrlenW (lpString=".rar") returned 4
	[0058.661] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.661] lstrlenW (lpString=".bz2") returned 4
	[0058.661] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.661] lstrlenW (lpString=".7z") returned 3
	[0058.661] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 63
	[0058.661] lstrlenW (lpString=".dbf") returned 4
	[0058.661] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 63
	[0058.661] lstrlenW (lpString=".1cd") returned 4
	[0058.661] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 63
	[0058.661] lstrlenW (lpString=".jpg") returned 4
	[0058.661] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.661] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=15308) returned 1
	[0058.661] CloseHandle (hObject=0x1ec) returned 1
	[0058.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif")) returned 0x20
	[0058.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0058.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0058.662] GetLastError () returned 0x0
	[0058.662] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x3bcc, lpOverlapped=0x0) returned 1
	[0058.665] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x3bd0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x3bd0, lpOverlapped=0x0) returned 1
	[0058.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.666] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.666] SetEndOfFile (hFile=0x1bc) returned 1
	[0058.666] CloseHandle (hObject=0x1bc) returned 1
	[0058.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.666] SetEndOfFile (hFile=0x1ec) returned 1
	[0058.667] CloseHandle (hObject=0x1ec) returned 1
	[0058.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.667] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif")) returned 1
	[0058.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 63
	[0058.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 63
	[0058.668] lstrlenW (lpString=".doc") returned 4
	[0058.668] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.668] lstrlenW (lpString=".docx") returned 5
	[0058.668] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.668] lstrlenW (lpString=".pdf") returned 4
	[0058.668] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.668] lstrlenW (lpString=".xls") returned 4
	[0058.668] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.668] lstrlenW (lpString=".xlsx") returned 5
	[0058.668] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.668] lstrlenW (lpString=".ppt") returned 4
	[0058.668] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 63
	[0058.668] lstrlenW (lpString=".zip") returned 4
	[0058.668] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.668] lstrlenW (lpString=".rar") returned 4
	[0058.668] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.668] lstrlenW (lpString=".bz2") returned 4
	[0058.668] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.668] lstrlenW (lpString=".7z") returned 3
	[0058.668] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 63
	[0058.668] lstrlenW (lpString=".dbf") returned 4
	[0058.668] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 63
	[0058.668] lstrlenW (lpString=".1cd") returned 4
	[0058.668] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 63
	[0058.668] lstrlenW (lpString=".jpg") returned 4
	[0058.669] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.669] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=5315) returned 1
	[0058.669] CloseHandle (hObject=0x1ec) returned 1
	[0058.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif")) returned 0x20
	[0058.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0058.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0058.669] GetLastError () returned 0x0
	[0058.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x14c3, lpOverlapped=0x0) returned 1
	[0058.671] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x14d0, lpOverlapped=0x0) returned 1
	[0058.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.673] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.673] SetEndOfFile (hFile=0x1bc) returned 1
	[0058.673] CloseHandle (hObject=0x1bc) returned 1
	[0058.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.673] SetEndOfFile (hFile=0x1ec) returned 1
	[0058.674] CloseHandle (hObject=0x1ec) returned 1
	[0058.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.674] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif")) returned 1
	[0058.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 63
	[0058.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 63
	[0058.674] lstrlenW (lpString=".doc") returned 4
	[0058.674] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.674] lstrlenW (lpString=".docx") returned 5
	[0058.674] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.674] lstrlenW (lpString=".pdf") returned 4
	[0058.674] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.674] lstrlenW (lpString=".xls") returned 4
	[0058.674] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.675] lstrlenW (lpString=".xlsx") returned 5
	[0058.675] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.675] lstrlenW (lpString=".ppt") returned 4
	[0058.675] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 63
	[0058.675] lstrlenW (lpString=".zip") returned 4
	[0058.675] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.675] lstrlenW (lpString=".rar") returned 4
	[0058.675] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.675] lstrlenW (lpString=".bz2") returned 4
	[0058.675] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.675] lstrlenW (lpString=".7z") returned 3
	[0058.675] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 63
	[0058.675] lstrlenW (lpString=".dbf") returned 4
	[0058.675] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 63
	[0058.675] lstrlenW (lpString=".1cd") returned 4
	[0058.675] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 63
	[0058.675] lstrlenW (lpString=".jpg") returned 4
	[0058.675] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0058.676] GetLastError () returned 0x0
	[0058.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x135b, lpOverlapped=0x0) returned 1
	[0058.678] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x1360, lpOverlapped=0x0) returned 1
	[0058.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.679] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.679] SetEndOfFile (hFile=0x1bc) returned 1
	[0058.679] CloseHandle (hObject=0x1bc) returned 1
	[0058.679] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.679] SetEndOfFile (hFile=0x1ec) returned 1
	[0058.680] CloseHandle (hObject=0x1ec) returned 1
	[0058.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.681] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif")) returned 1
	[0058.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 63
	[0058.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 63
	[0058.681] lstrlenW (lpString=".doc") returned 4
	[0058.681] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.681] lstrlenW (lpString=".docx") returned 5
	[0058.681] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.681] lstrlenW (lpString=".pdf") returned 4
	[0058.681] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.681] lstrlenW (lpString=".xls") returned 4
	[0058.681] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.681] lstrlenW (lpString=".xlsx") returned 5
	[0058.681] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.681] lstrlenW (lpString=".ppt") returned 4
	[0058.681] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 63
	[0058.681] lstrlenW (lpString=".zip") returned 4
	[0058.681] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.681] lstrlenW (lpString=".rar") returned 4
	[0058.681] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.681] lstrlenW (lpString=".bz2") returned 4
	[0058.681] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.681] lstrlenW (lpString=".7z") returned 3
	[0058.682] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 63
	[0058.682] lstrlenW (lpString=".dbf") returned 4
	[0058.682] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 63
	[0058.682] lstrlenW (lpString=".1cd") returned 4
	[0058.682] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 63
	[0058.682] lstrlenW (lpString=".jpg") returned 4
	[0058.682] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0058.683] GetLastError () returned 0x0
	[0058.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x13a6, lpOverlapped=0x0) returned 1
	[0058.687] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x13b0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x13b0, lpOverlapped=0x0) returned 1
	[0058.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.688] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.688] SetEndOfFile (hFile=0x1bc) returned 1
	[0058.688] CloseHandle (hObject=0x1bc) returned 1
	[0058.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.688] SetEndOfFile (hFile=0x1ec) returned 1
	[0058.689] CloseHandle (hObject=0x1ec) returned 1
	[0058.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.689] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif")) returned 1
	[0058.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 63
	[0058.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 63
	[0058.690] lstrlenW (lpString=".doc") returned 4
	[0058.690] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.690] lstrlenW (lpString=".docx") returned 5
	[0058.690] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.690] lstrlenW (lpString=".pdf") returned 4
	[0058.690] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.690] lstrlenW (lpString=".xls") returned 4
	[0058.690] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.690] lstrlenW (lpString=".xlsx") returned 5
	[0058.690] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.690] lstrlenW (lpString=".ppt") returned 4
	[0058.690] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 63
	[0058.690] lstrlenW (lpString=".zip") returned 4
	[0058.690] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.690] lstrlenW (lpString=".rar") returned 4
	[0058.690] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.690] lstrlenW (lpString=".bz2") returned 4
	[0058.690] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.690] lstrlenW (lpString=".7z") returned 3
	[0058.690] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 63
	[0058.690] lstrlenW (lpString=".dbf") returned 4
	[0058.690] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 63
	[0058.691] lstrlenW (lpString=".1cd") returned 4
	[0058.691] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 63
	[0058.691] lstrlenW (lpString=".jpg") returned 4
	[0058.691] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0058.691] GetLastError () returned 0x0
	[0058.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x1d9f, lpOverlapped=0x0) returned 1
	[0058.697] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x1da0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x1da0, lpOverlapped=0x0) returned 1
	[0058.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.698] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.699] SetEndOfFile (hFile=0x1bc) returned 1
	[0058.699] CloseHandle (hObject=0x1bc) returned 1
	[0058.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.699] SetEndOfFile (hFile=0x1ec) returned 1
	[0058.700] CloseHandle (hObject=0x1ec) returned 1
	[0058.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.700] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif")) returned 1
	[0058.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 63
	[0058.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 63
	[0058.700] lstrlenW (lpString=".doc") returned 4
	[0058.700] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.701] lstrlenW (lpString=".docx") returned 5
	[0058.701] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.701] lstrlenW (lpString=".pdf") returned 4
	[0058.701] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.701] lstrlenW (lpString=".xls") returned 4
	[0058.701] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.701] lstrlenW (lpString=".xlsx") returned 5
	[0058.701] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.701] lstrlenW (lpString=".ppt") returned 4
	[0058.701] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 63
	[0058.701] lstrlenW (lpString=".zip") returned 4
	[0058.701] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.701] lstrlenW (lpString=".rar") returned 4
	[0058.701] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.701] lstrlenW (lpString=".bz2") returned 4
	[0058.701] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.701] lstrlenW (lpString=".7z") returned 3
	[0058.701] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 63
	[0058.701] lstrlenW (lpString=".dbf") returned 4
	[0058.701] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 63
	[0058.701] lstrlenW (lpString=".1cd") returned 4
	[0058.701] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 63
	[0058.701] lstrlenW (lpString=".jpg") returned 4
	[0058.701] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0058.702] GetLastError () returned 0x0
	[0058.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x33c6, lpOverlapped=0x0) returned 1
	[0058.704] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x33d0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x33d0, lpOverlapped=0x0) returned 1
	[0058.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.705] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.705] SetEndOfFile (hFile=0x1bc) returned 1
	[0058.705] CloseHandle (hObject=0x1bc) returned 1
	[0058.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.705] SetEndOfFile (hFile=0x1ec) returned 1
	[0058.706] CloseHandle (hObject=0x1ec) returned 1
	[0058.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.706] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif")) returned 1
	[0058.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 63
	[0058.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 63
	[0058.707] lstrlenW (lpString=".doc") returned 4
	[0058.707] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.707] lstrlenW (lpString=".docx") returned 5
	[0058.707] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.707] lstrlenW (lpString=".pdf") returned 4
	[0058.707] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.707] lstrlenW (lpString=".xls") returned 4
	[0058.707] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.707] lstrlenW (lpString=".xlsx") returned 5
	[0058.707] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.707] lstrlenW (lpString=".ppt") returned 4
	[0058.707] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 63
	[0058.707] lstrlenW (lpString=".zip") returned 4
	[0058.707] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.707] lstrlenW (lpString=".rar") returned 4
	[0058.707] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.707] lstrlenW (lpString=".bz2") returned 4
	[0058.707] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.707] lstrlenW (lpString=".7z") returned 3
	[0058.707] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 63
	[0058.708] lstrlenW (lpString=".dbf") returned 4
	[0058.708] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 63
	[0058.708] lstrlenW (lpString=".1cd") returned 4
	[0058.708] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 63
	[0058.708] lstrlenW (lpString=".jpg") returned 4
	[0058.708] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0058.709] GetLastError () returned 0x0
	[0058.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x2186, lpOverlapped=0x0) returned 1
	[0058.711] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x2190, lpOverlapped=0x0) returned 1
	[0058.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.713] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.713] SetEndOfFile (hFile=0x1bc) returned 1
	[0058.713] CloseHandle (hObject=0x1bc) returned 1
	[0058.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.713] SetEndOfFile (hFile=0x1ec) returned 1
	[0058.716] CloseHandle (hObject=0x1ec) returned 1
	[0058.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.716] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif")) returned 1
	[0058.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 63
	[0058.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 63
	[0058.717] lstrlenW (lpString=".doc") returned 4
	[0058.717] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.717] lstrlenW (lpString=".docx") returned 5
	[0058.717] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.717] lstrlenW (lpString=".pdf") returned 4
	[0058.717] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.717] lstrlenW (lpString=".xls") returned 4
	[0058.717] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.717] lstrlenW (lpString=".xlsx") returned 5
	[0058.717] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.717] lstrlenW (lpString=".ppt") returned 4
	[0058.717] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 63
	[0058.717] lstrlenW (lpString=".zip") returned 4
	[0058.717] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.717] lstrlenW (lpString=".rar") returned 4
	[0058.717] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.717] lstrlenW (lpString=".bz2") returned 4
	[0058.717] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.717] lstrlenW (lpString=".7z") returned 3
	[0058.717] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 63
	[0058.717] lstrlenW (lpString=".dbf") returned 4
	[0058.717] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 63
	[0058.718] lstrlenW (lpString=".1cd") returned 4
	[0058.718] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 63
	[0058.718] lstrlenW (lpString=".jpg") returned 4
	[0058.718] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.718] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x791ff1c | out: lpFileSize=0x791ff1c*=4894) returned 1
	[0058.718] CloseHandle (hObject=0x1ec) returned 1
	[0058.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif")) returned 0x20
	[0058.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0058.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0058.719] GetLastError () returned 0x0
	[0058.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x131e, lpOverlapped=0x0) returned 1
	[0058.721] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x1320, lpOverlapped=0x0) returned 1
	[0058.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.722] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.722] SetEndOfFile (hFile=0x1bc) returned 1
	[0058.722] CloseHandle (hObject=0x1bc) returned 1
	[0058.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.722] SetEndOfFile (hFile=0x1ec) returned 1
	[0058.723] CloseHandle (hObject=0x1ec) returned 1
	[0058.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.723] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif")) returned 1
	[0058.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 63
	[0058.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 63
	[0058.723] lstrlenW (lpString=".doc") returned 4
	[0058.723] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.723] lstrlenW (lpString=".docx") returned 5
	[0058.723] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.723] lstrlenW (lpString=".pdf") returned 4
	[0058.723] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.723] lstrlenW (lpString=".xls") returned 4
	[0058.723] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.723] lstrlenW (lpString=".xlsx") returned 5
	[0058.723] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.724] lstrlenW (lpString=".ppt") returned 4
	[0058.724] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 63
	[0058.724] lstrlenW (lpString=".zip") returned 4
	[0058.724] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.724] lstrlenW (lpString=".rar") returned 4
	[0058.724] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.724] lstrlenW (lpString=".bz2") returned 4
	[0058.724] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.724] lstrlenW (lpString=".7z") returned 3
	[0058.724] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 63
	[0058.724] lstrlenW (lpString=".dbf") returned 4
	[0058.724] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 63
	[0058.724] lstrlenW (lpString=".1cd") returned 4
	[0058.724] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 63
	[0058.724] lstrlenW (lpString=".jpg") returned 4
	[0058.724] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0058.725] GetLastError () returned 0x0
	[0058.725] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x14ff, lpOverlapped=0x0) returned 1
	[0058.727] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x1500, lpOverlapped=0x0) returned 1
	[0058.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.728] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.728] SetEndOfFile (hFile=0x1bc) returned 1
	[0058.728] CloseHandle (hObject=0x1bc) returned 1
	[0058.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.728] SetEndOfFile (hFile=0x1ec) returned 1
	[0058.729] CloseHandle (hObject=0x1ec) returned 1
	[0058.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.729] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif")) returned 1
	[0058.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 63
	[0058.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 63
	[0058.730] lstrlenW (lpString=".doc") returned 4
	[0058.730] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.730] lstrlenW (lpString=".docx") returned 5
	[0058.730] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.730] lstrlenW (lpString=".pdf") returned 4
	[0058.730] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.730] lstrlenW (lpString=".xls") returned 4
	[0058.730] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.730] lstrlenW (lpString=".xlsx") returned 5
	[0058.730] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.730] lstrlenW (lpString=".ppt") returned 4
	[0058.730] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 63
	[0058.730] lstrlenW (lpString=".zip") returned 4
	[0058.730] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.730] lstrlenW (lpString=".rar") returned 4
	[0058.730] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.730] lstrlenW (lpString=".bz2") returned 4
	[0058.730] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.730] lstrlenW (lpString=".7z") returned 3
	[0058.730] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 63
	[0058.730] lstrlenW (lpString=".dbf") returned 4
	[0058.730] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 63
	[0058.730] lstrlenW (lpString=".1cd") returned 4
	[0058.730] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 63
	[0058.730] lstrlenW (lpString=".jpg") returned 4
	[0058.731] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0058.731] GetLastError () returned 0x0
	[0058.731] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x2420, lpOverlapped=0x0) returned 1
	[0058.733] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x2430, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x2430, lpOverlapped=0x0) returned 1
	[0058.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.734] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.734] SetEndOfFile (hFile=0x1bc) returned 1
	[0058.734] CloseHandle (hObject=0x1bc) returned 1
	[0058.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.734] SetEndOfFile (hFile=0x1ec) returned 1
	[0058.735] CloseHandle (hObject=0x1ec) returned 1
	[0058.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.735] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif")) returned 1
	[0058.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 63
	[0058.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 63
	[0058.736] lstrlenW (lpString=".doc") returned 4
	[0058.736] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.736] lstrlenW (lpString=".docx") returned 5
	[0058.736] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.736] lstrlenW (lpString=".pdf") returned 4
	[0058.736] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.736] lstrlenW (lpString=".xls") returned 4
	[0058.736] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.736] lstrlenW (lpString=".xlsx") returned 5
	[0058.736] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.736] lstrlenW (lpString=".ppt") returned 4
	[0058.736] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 63
	[0058.736] lstrlenW (lpString=".zip") returned 4
	[0058.736] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.736] lstrlenW (lpString=".rar") returned 4
	[0058.736] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.736] lstrlenW (lpString=".bz2") returned 4
	[0058.736] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.736] lstrlenW (lpString=".7z") returned 3
	[0058.736] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 63
	[0058.736] lstrlenW (lpString=".dbf") returned 4
	[0058.736] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 63
	[0058.736] lstrlenW (lpString=".1cd") returned 4
	[0058.736] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 63
	[0058.737] lstrlenW (lpString=".jpg") returned 4
	[0058.737] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0058.737] GetLastError () returned 0x0
	[0058.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x1398, lpOverlapped=0x0) returned 1
	[0058.880] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x13a0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x13a0, lpOverlapped=0x0) returned 1
	[0058.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.881] WriteFile (in: hFile=0x1bc, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.881] SetEndOfFile (hFile=0x1bc) returned 1
	[0058.882] CloseHandle (hObject=0x1bc) returned 1
	[0058.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.882] SetEndOfFile (hFile=0x1ec) returned 1
	[0058.888] CloseHandle (hObject=0x1ec) returned 1
	[0058.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.897] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif")) returned 1
	[0058.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 63
	[0058.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 63
	[0058.897] lstrlenW (lpString=".doc") returned 4
	[0058.897] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.897] lstrlenW (lpString=".docx") returned 5
	[0058.904] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.904] lstrlenW (lpString=".pdf") returned 4
	[0058.904] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.904] lstrlenW (lpString=".xls") returned 4
	[0058.904] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.904] lstrlenW (lpString=".xlsx") returned 5
	[0058.904] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.904] lstrlenW (lpString=".ppt") returned 4
	[0058.904] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 63
	[0058.910] lstrlenW (lpString=".zip") returned 4
	[0058.910] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.910] lstrlenW (lpString=".rar") returned 4
	[0058.910] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.910] lstrlenW (lpString=".bz2") returned 4
	[0058.910] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.910] lstrlenW (lpString=".7z") returned 3
	[0058.910] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 63
	[0058.917] lstrlenW (lpString=".dbf") returned 4
	[0058.917] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 63
	[0058.917] lstrlenW (lpString=".1cd") returned 4
	[0058.917] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 63
	[0058.917] lstrlenW (lpString=".jpg") returned 4
	[0058.917] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0061.144] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.146] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0061.146] GetLastError () returned 0x0
	[0061.146] ReadFile (in: hFile=0x220, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x1f20, lpOverlapped=0x0) returned 1
	[0061.148] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x1f30, lpOverlapped=0x0) returned 1
	[0061.149] ReadFile (in: hFile=0x220, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.149] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.149] SetEndOfFile (hFile=0x1b8) returned 1
	[0061.150] CloseHandle (hObject=0x1b8) returned 1
	[0061.150] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.150] SetEndOfFile (hFile=0x220) returned 1
	[0061.151] CloseHandle (hObject=0x220) returned 1
	[0061.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.151] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf")) returned 1
	[0061.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 63
	[0061.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 63
	[0061.151] lstrlenW (lpString=".doc") returned 4
	[0061.151] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.151] lstrlenW (lpString=".docx") returned 5
	[0061.151] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.152] lstrlenW (lpString=".pdf") returned 4
	[0061.152] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.152] lstrlenW (lpString=".xls") returned 4
	[0061.152] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.152] lstrlenW (lpString=".xlsx") returned 5
	[0061.152] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.152] lstrlenW (lpString=".ppt") returned 4
	[0061.152] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 63
	[0061.152] lstrlenW (lpString=".zip") returned 4
	[0061.152] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.152] lstrlenW (lpString=".rar") returned 4
	[0061.152] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.152] lstrlenW (lpString=".bz2") returned 4
	[0061.152] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.152] lstrlenW (lpString=".7z") returned 3
	[0061.152] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 63
	[0061.152] lstrlenW (lpString=".dbf") returned 4
	[0061.152] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 63
	[0061.152] lstrlenW (lpString=".1cd") returned 4
	[0061.152] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 63
	[0061.152] lstrlenW (lpString=".jpg") returned 4
	[0061.152] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.153] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.153] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0061.154] GetLastError () returned 0x0
	[0061.154] ReadFile (in: hFile=0x220, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x83c, lpOverlapped=0x0) returned 1
	[0061.155] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x840, lpOverlapped=0x0) returned 1
	[0061.161] ReadFile (in: hFile=0x220, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.161] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.161] SetEndOfFile (hFile=0x1b8) returned 1
	[0061.161] CloseHandle (hObject=0x1b8) returned 1
	[0061.161] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.161] SetEndOfFile (hFile=0x220) returned 1
	[0061.162] CloseHandle (hObject=0x220) returned 1
	[0061.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.162] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf")) returned 1
	[0061.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 63
	[0061.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 63
	[0061.163] lstrlenW (lpString=".doc") returned 4
	[0061.163] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.163] lstrlenW (lpString=".docx") returned 5
	[0061.163] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.163] lstrlenW (lpString=".pdf") returned 4
	[0061.163] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.163] lstrlenW (lpString=".xls") returned 4
	[0061.163] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.163] lstrlenW (lpString=".xlsx") returned 5
	[0061.163] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.163] lstrlenW (lpString=".ppt") returned 4
	[0061.163] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 63
	[0061.163] lstrlenW (lpString=".zip") returned 4
	[0061.163] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.163] lstrlenW (lpString=".rar") returned 4
	[0061.163] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.163] lstrlenW (lpString=".bz2") returned 4
	[0061.163] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.163] lstrlenW (lpString=".7z") returned 3
	[0061.163] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 63
	[0061.163] lstrlenW (lpString=".dbf") returned 4
	[0061.163] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 63
	[0061.163] lstrlenW (lpString=".1cd") returned 4
	[0061.163] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 63
	[0061.164] lstrlenW (lpString=".jpg") returned 4
	[0061.164] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.164] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.164] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0061.164] GetLastError () returned 0x0
	[0061.164] ReadFile (in: hFile=0x220, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x2418, lpOverlapped=0x0) returned 1
	[0061.166] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x2420, lpOverlapped=0x0) returned 1
	[0061.167] ReadFile (in: hFile=0x220, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.167] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.167] SetEndOfFile (hFile=0x1b8) returned 1
	[0061.167] CloseHandle (hObject=0x1b8) returned 1
	[0061.167] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.167] SetEndOfFile (hFile=0x220) returned 1
	[0061.168] CloseHandle (hObject=0x220) returned 1
	[0061.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.169] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf")) returned 1
	[0061.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 63
	[0061.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 63
	[0061.169] lstrlenW (lpString=".doc") returned 4
	[0061.169] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.169] lstrlenW (lpString=".docx") returned 5
	[0061.169] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.169] lstrlenW (lpString=".pdf") returned 4
	[0061.169] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.169] lstrlenW (lpString=".xls") returned 4
	[0061.169] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.169] lstrlenW (lpString=".xlsx") returned 5
	[0061.169] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.169] lstrlenW (lpString=".ppt") returned 4
	[0061.169] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 63
	[0061.169] lstrlenW (lpString=".zip") returned 4
	[0061.169] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.169] lstrlenW (lpString=".rar") returned 4
	[0061.169] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.169] lstrlenW (lpString=".bz2") returned 4
	[0061.169] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.169] lstrlenW (lpString=".7z") returned 3
	[0061.170] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 63
	[0061.170] lstrlenW (lpString=".dbf") returned 4
	[0061.170] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 63
	[0061.170] lstrlenW (lpString=".1cd") returned 4
	[0061.170] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 63
	[0061.170] lstrlenW (lpString=".jpg") returned 4
	[0061.170] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.170] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.170] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0061.170] GetLastError () returned 0x0
	[0061.170] ReadFile (in: hFile=0x220, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x928, lpOverlapped=0x0) returned 1
	[0061.172] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x930, lpOverlapped=0x0) returned 1
	[0061.173] ReadFile (in: hFile=0x220, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.173] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.173] SetEndOfFile (hFile=0x1b8) returned 1
	[0061.173] CloseHandle (hObject=0x1b8) returned 1
	[0061.173] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.173] SetEndOfFile (hFile=0x220) returned 1
	[0061.174] CloseHandle (hObject=0x220) returned 1
	[0061.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.174] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf")) returned 1
	[0061.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 63
	[0061.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 63
	[0061.175] lstrlenW (lpString=".doc") returned 4
	[0061.175] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.175] lstrlenW (lpString=".docx") returned 5
	[0061.175] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.175] lstrlenW (lpString=".pdf") returned 4
	[0061.175] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.175] lstrlenW (lpString=".xls") returned 4
	[0061.175] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.175] lstrlenW (lpString=".xlsx") returned 5
	[0061.175] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.175] lstrlenW (lpString=".ppt") returned 4
	[0061.175] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 63
	[0061.177] lstrlenW (lpString=".zip") returned 4
	[0061.177] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.177] lstrlenW (lpString=".rar") returned 4
	[0061.177] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.177] lstrlenW (lpString=".bz2") returned 4
	[0061.177] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.177] lstrlenW (lpString=".7z") returned 3
	[0061.178] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 63
	[0061.178] lstrlenW (lpString=".dbf") returned 4
	[0061.178] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 63
	[0061.178] lstrlenW (lpString=".1cd") returned 4
	[0061.178] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 63
	[0061.178] lstrlenW (lpString=".jpg") returned 4
	[0061.178] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.178] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.178] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0061.179] GetLastError () returned 0x0
	[0061.179] ReadFile (in: hFile=0x220, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x17ac, lpOverlapped=0x0) returned 1
	[0061.181] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x17b0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x17b0, lpOverlapped=0x0) returned 1
	[0061.182] ReadFile (in: hFile=0x220, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.182] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.182] SetEndOfFile (hFile=0x1b8) returned 1
	[0061.182] CloseHandle (hObject=0x1b8) returned 1
	[0061.182] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.183] SetEndOfFile (hFile=0x220) returned 1
	[0061.183] CloseHandle (hObject=0x220) returned 1
	[0061.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.184] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf")) returned 1
	[0061.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 63
	[0061.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 63
	[0061.184] lstrlenW (lpString=".doc") returned 4
	[0061.184] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.184] lstrlenW (lpString=".docx") returned 5
	[0061.184] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.184] lstrlenW (lpString=".pdf") returned 4
	[0061.184] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.184] lstrlenW (lpString=".xls") returned 4
	[0061.184] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.184] lstrlenW (lpString=".xlsx") returned 5
	[0061.184] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.184] lstrlenW (lpString=".ppt") returned 4
	[0061.184] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 63
	[0061.184] lstrlenW (lpString=".zip") returned 4
	[0061.184] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.184] lstrlenW (lpString=".rar") returned 4
	[0061.184] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.184] lstrlenW (lpString=".bz2") returned 4
	[0061.184] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.184] lstrlenW (lpString=".7z") returned 3
	[0061.184] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 63
	[0061.185] lstrlenW (lpString=".dbf") returned 4
	[0061.185] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 63
	[0061.185] lstrlenW (lpString=".1cd") returned 4
	[0061.185] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 63
	[0061.185] lstrlenW (lpString=".jpg") returned 4
	[0061.185] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.185] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.185] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0061.185] GetLastError () returned 0x0
	[0061.185] ReadFile (in: hFile=0x220, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0xd58, lpOverlapped=0x0) returned 1
	[0061.599] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xd60, lpOverlapped=0x0) returned 1
	[0061.600] ReadFile (in: hFile=0x220, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.601] WriteFile (in: hFile=0x1b8, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.601] SetEndOfFile (hFile=0x1b8) returned 1
	[0061.601] CloseHandle (hObject=0x1b8) returned 1
	[0061.601] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.601] SetEndOfFile (hFile=0x220) returned 1
	[0061.602] CloseHandle (hObject=0x220) returned 1
	[0061.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.602] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf")) returned 1
	[0061.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 63
	[0061.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 63
	[0061.762] lstrlenW (lpString=".doc") returned 4
	[0061.762] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.762] lstrlenW (lpString=".docx") returned 5
	[0061.762] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.762] lstrlenW (lpString=".pdf") returned 4
	[0061.762] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.762] lstrlenW (lpString=".xls") returned 4
	[0061.762] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.762] lstrlenW (lpString=".xlsx") returned 5
	[0061.762] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.762] lstrlenW (lpString=".ppt") returned 4
	[0061.762] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 63
	[0061.762] lstrlenW (lpString=".zip") returned 4
	[0061.762] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.762] lstrlenW (lpString=".rar") returned 4
	[0061.762] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.762] lstrlenW (lpString=".bz2") returned 4
	[0061.762] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.762] lstrlenW (lpString=".7z") returned 3
	[0061.762] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 63
	[0061.762] lstrlenW (lpString=".dbf") returned 4
	[0061.762] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 63
	[0061.762] lstrlenW (lpString=".1cd") returned 4
	[0061.762] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 63
	[0061.762] lstrlenW (lpString=".jpg") returned 4
	[0061.762] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.835] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.836] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0062.836] GetLastError () returned 0x0
	[0062.836] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0xc9c, lpOverlapped=0x0) returned 1
	[0062.842] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xca0, lpOverlapped=0x0) returned 1
	[0062.843] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.843] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.843] SetEndOfFile (hFile=0x220) returned 1
	[0062.843] CloseHandle (hObject=0x220) returned 1
	[0062.843] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.843] SetEndOfFile (hFile=0x1f8) returned 1
	[0062.844] CloseHandle (hObject=0x1f8) returned 1
	[0062.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.845] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf")) returned 1
	[0062.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 63
	[0062.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 63
	[0062.845] lstrlenW (lpString=".doc") returned 4
	[0062.845] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.845] lstrlenW (lpString=".docx") returned 5
	[0062.845] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.845] lstrlenW (lpString=".pdf") returned 4
	[0062.845] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.845] lstrlenW (lpString=".xls") returned 4
	[0062.845] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.845] lstrlenW (lpString=".xlsx") returned 5
	[0062.845] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.845] lstrlenW (lpString=".ppt") returned 4
	[0062.845] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 63
	[0062.845] lstrlenW (lpString=".zip") returned 4
	[0062.845] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.845] lstrlenW (lpString=".rar") returned 4
	[0062.846] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.846] lstrlenW (lpString=".bz2") returned 4
	[0062.846] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.846] lstrlenW (lpString=".7z") returned 3
	[0062.846] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.846] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 63
	[0062.846] lstrlenW (lpString=".dbf") returned 4
	[0062.846] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.846] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 63
	[0062.846] lstrlenW (lpString=".1cd") returned 4
	[0062.846] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.846] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 63
	[0062.846] lstrlenW (lpString=".jpg") returned 4
	[0062.846] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.847] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.847] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0062.847] GetLastError () returned 0x0
	[0062.847] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x57f4, lpOverlapped=0x0) returned 1
	[0062.849] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x5800, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x5800, lpOverlapped=0x0) returned 1
	[0062.851] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.851] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.851] SetEndOfFile (hFile=0x220) returned 1
	[0062.851] CloseHandle (hObject=0x220) returned 1
	[0062.851] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.851] SetEndOfFile (hFile=0x1f8) returned 1
	[0062.852] CloseHandle (hObject=0x1f8) returned 1
	[0062.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.852] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf")) returned 1
	[0062.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 63
	[0062.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 63
	[0062.853] lstrlenW (lpString=".doc") returned 4
	[0062.853] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.853] lstrlenW (lpString=".docx") returned 5
	[0062.853] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.853] lstrlenW (lpString=".pdf") returned 4
	[0062.853] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.853] lstrlenW (lpString=".xls") returned 4
	[0062.853] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.853] lstrlenW (lpString=".xlsx") returned 5
	[0062.853] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.853] lstrlenW (lpString=".ppt") returned 4
	[0062.855] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 63
	[0062.855] lstrlenW (lpString=".zip") returned 4
	[0062.855] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.855] lstrlenW (lpString=".rar") returned 4
	[0062.855] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.855] lstrlenW (lpString=".bz2") returned 4
	[0062.855] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.855] lstrlenW (lpString=".7z") returned 3
	[0062.855] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 63
	[0062.855] lstrlenW (lpString=".dbf") returned 4
	[0062.855] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 63
	[0062.855] lstrlenW (lpString=".1cd") returned 4
	[0062.855] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 63
	[0062.855] lstrlenW (lpString=".jpg") returned 4
	[0062.855] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.856] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.856] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0062.856] GetLastError () returned 0x0
	[0062.856] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x3f34, lpOverlapped=0x0) returned 1
	[0062.858] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x3f40, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x3f40, lpOverlapped=0x0) returned 1
	[0062.859] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.859] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.859] SetEndOfFile (hFile=0x220) returned 1
	[0062.859] CloseHandle (hObject=0x220) returned 1
	[0062.860] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.860] SetEndOfFile (hFile=0x1f8) returned 1
	[0062.861] CloseHandle (hObject=0x1f8) returned 1
	[0062.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.861] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf")) returned 1
	[0062.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 63
	[0062.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 63
	[0062.861] lstrlenW (lpString=".doc") returned 4
	[0062.861] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.861] lstrlenW (lpString=".docx") returned 5
	[0062.861] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.861] lstrlenW (lpString=".pdf") returned 4
	[0062.861] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.861] lstrlenW (lpString=".xls") returned 4
	[0062.862] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.862] lstrlenW (lpString=".xlsx") returned 5
	[0062.862] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.862] lstrlenW (lpString=".ppt") returned 4
	[0062.862] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 63
	[0062.862] lstrlenW (lpString=".zip") returned 4
	[0062.862] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.862] lstrlenW (lpString=".rar") returned 4
	[0062.862] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.862] lstrlenW (lpString=".bz2") returned 4
	[0062.862] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.862] lstrlenW (lpString=".7z") returned 3
	[0062.862] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 63
	[0062.862] lstrlenW (lpString=".dbf") returned 4
	[0062.862] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 63
	[0062.862] lstrlenW (lpString=".1cd") returned 4
	[0062.862] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 63
	[0062.862] lstrlenW (lpString=".jpg") returned 4
	[0062.862] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.862] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.862] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0062.863] GetLastError () returned 0x0
	[0062.863] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x4354, lpOverlapped=0x0) returned 1
	[0062.865] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x4360, lpOverlapped=0x0) returned 1
	[0062.866] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.866] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.866] SetEndOfFile (hFile=0x220) returned 1
	[0062.866] CloseHandle (hObject=0x220) returned 1
	[0062.866] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.866] SetEndOfFile (hFile=0x1f8) returned 1
	[0062.867] CloseHandle (hObject=0x1f8) returned 1
	[0062.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.868] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf")) returned 1
	[0062.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 63
	[0062.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 63
	[0062.868] lstrlenW (lpString=".doc") returned 4
	[0062.868] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.868] lstrlenW (lpString=".docx") returned 5
	[0062.868] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.868] lstrlenW (lpString=".pdf") returned 4
	[0062.868] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.868] lstrlenW (lpString=".xls") returned 4
	[0062.868] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.868] lstrlenW (lpString=".xlsx") returned 5
	[0062.868] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.868] lstrlenW (lpString=".ppt") returned 4
	[0062.868] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 63
	[0062.868] lstrlenW (lpString=".zip") returned 4
	[0062.868] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.868] lstrlenW (lpString=".rar") returned 4
	[0062.868] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.868] lstrlenW (lpString=".bz2") returned 4
	[0062.868] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.868] lstrlenW (lpString=".7z") returned 3
	[0062.869] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 63
	[0062.869] lstrlenW (lpString=".dbf") returned 4
	[0062.869] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 63
	[0062.869] lstrlenW (lpString=".1cd") returned 4
	[0062.869] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 63
	[0062.869] lstrlenW (lpString=".jpg") returned 4
	[0062.869] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.869] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.869] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0062.869] GetLastError () returned 0x0
	[0062.869] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x3ef0, lpOverlapped=0x0) returned 1
	[0062.871] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x3f00, lpOverlapped=0x0) returned 1
	[0062.872] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.872] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.872] SetEndOfFile (hFile=0x220) returned 1
	[0062.872] CloseHandle (hObject=0x220) returned 1
	[0062.873] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.873] SetEndOfFile (hFile=0x1f8) returned 1
	[0062.873] CloseHandle (hObject=0x1f8) returned 1
	[0062.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.874] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf")) returned 1
	[0062.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 63
	[0062.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 63
	[0062.874] lstrlenW (lpString=".doc") returned 4
	[0062.874] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.874] lstrlenW (lpString=".docx") returned 5
	[0062.874] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.874] lstrlenW (lpString=".pdf") returned 4
	[0062.874] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.874] lstrlenW (lpString=".xls") returned 4
	[0062.874] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.874] lstrlenW (lpString=".xlsx") returned 5
	[0062.874] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.874] lstrlenW (lpString=".ppt") returned 4
	[0062.874] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 63
	[0062.874] lstrlenW (lpString=".zip") returned 4
	[0062.874] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.874] lstrlenW (lpString=".rar") returned 4
	[0062.875] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.875] lstrlenW (lpString=".bz2") returned 4
	[0062.875] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.875] lstrlenW (lpString=".7z") returned 3
	[0062.875] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 63
	[0062.875] lstrlenW (lpString=".dbf") returned 4
	[0062.875] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 63
	[0062.875] lstrlenW (lpString=".1cd") returned 4
	[0062.875] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 63
	[0062.875] lstrlenW (lpString=".jpg") returned 4
	[0062.875] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.876] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.876] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0062.876] GetLastError () returned 0x0
	[0062.876] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x4124, lpOverlapped=0x0) returned 1
	[0063.089] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x4130, lpOverlapped=0x0) returned 1
	[0063.090] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.090] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.090] SetEndOfFile (hFile=0x220) returned 1
	[0063.090] CloseHandle (hObject=0x220) returned 1
	[0063.090] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.091] SetEndOfFile (hFile=0x1f8) returned 1
	[0063.091] CloseHandle (hObject=0x1f8) returned 1
	[0063.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.092] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf")) returned 1
	[0063.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 63
	[0063.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 63
	[0063.092] lstrlenW (lpString=".doc") returned 4
	[0063.092] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0063.092] lstrlenW (lpString=".docx") returned 5
	[0063.092] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0063.092] lstrlenW (lpString=".pdf") returned 4
	[0063.092] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0063.092] lstrlenW (lpString=".xls") returned 4
	[0063.092] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0063.092] lstrlenW (lpString=".xlsx") returned 5
	[0063.092] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0063.093] lstrlenW (lpString=".ppt") returned 4
	[0063.093] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0063.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 63
	[0063.093] lstrlenW (lpString=".zip") returned 4
	[0063.093] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0063.093] lstrlenW (lpString=".rar") returned 4
	[0063.093] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0063.093] lstrlenW (lpString=".bz2") returned 4
	[0063.093] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0063.093] lstrlenW (lpString=".7z") returned 3
	[0063.093] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0063.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 63
	[0063.093] lstrlenW (lpString=".dbf") returned 4
	[0063.093] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0063.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 63
	[0063.093] lstrlenW (lpString=".1cd") returned 4
	[0063.093] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0063.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 63
	[0063.093] lstrlenW (lpString=".jpg") returned 4
	[0063.093] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0063.093] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.094] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0063.094] GetLastError () returned 0x0
	[0063.094] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x2244, lpOverlapped=0x0) returned 1
	[0063.096] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x2250, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x2250, lpOverlapped=0x0) returned 1
	[0063.097] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.097] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.097] SetEndOfFile (hFile=0x220) returned 1
	[0063.097] CloseHandle (hObject=0x220) returned 1
	[0063.097] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.097] SetEndOfFile (hFile=0x1f8) returned 1
	[0063.098] CloseHandle (hObject=0x1f8) returned 1
	[0063.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.099] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf")) returned 1
	[0063.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 63
	[0063.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 63
	[0063.099] lstrlenW (lpString=".doc") returned 4
	[0063.099] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0063.099] lstrlenW (lpString=".docx") returned 5
	[0063.099] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0063.099] lstrlenW (lpString=".pdf") returned 4
	[0063.099] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0063.099] lstrlenW (lpString=".xls") returned 4
	[0063.099] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0063.099] lstrlenW (lpString=".xlsx") returned 5
	[0063.099] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0063.099] lstrlenW (lpString=".ppt") returned 4
	[0063.099] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0063.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 63
	[0063.099] lstrlenW (lpString=".zip") returned 4
	[0063.099] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0063.099] lstrlenW (lpString=".rar") returned 4
	[0063.099] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0063.099] lstrlenW (lpString=".bz2") returned 4
	[0063.099] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0063.099] lstrlenW (lpString=".7z") returned 3
	[0063.100] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0063.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 63
	[0063.100] lstrlenW (lpString=".dbf") returned 4
	[0063.100] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0063.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 63
	[0063.100] lstrlenW (lpString=".1cd") returned 4
	[0063.100] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0063.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 63
	[0063.100] lstrlenW (lpString=".jpg") returned 4
	[0063.100] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0063.100] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.100] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0063.101] GetLastError () returned 0x0
	[0063.101] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x3896, lpOverlapped=0x0) returned 1
	[0063.103] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x38a0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x38a0, lpOverlapped=0x0) returned 1
	[0063.104] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.104] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.104] SetEndOfFile (hFile=0x220) returned 1
	[0063.104] CloseHandle (hObject=0x220) returned 1
	[0063.104] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.104] SetEndOfFile (hFile=0x1f8) returned 1
	[0063.105] CloseHandle (hObject=0x1f8) returned 1
	[0063.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.105] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf")) returned 1
	[0063.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 63
	[0063.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 63
	[0063.105] lstrlenW (lpString=".doc") returned 4
	[0063.106] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0063.106] lstrlenW (lpString=".docx") returned 5
	[0063.106] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0063.106] lstrlenW (lpString=".pdf") returned 4
	[0063.106] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0063.106] lstrlenW (lpString=".xls") returned 4
	[0063.106] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0063.106] lstrlenW (lpString=".xlsx") returned 5
	[0063.106] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0063.106] lstrlenW (lpString=".ppt") returned 4
	[0063.106] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0063.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 63
	[0063.106] lstrlenW (lpString=".zip") returned 4
	[0063.106] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0063.106] lstrlenW (lpString=".rar") returned 4
	[0063.106] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0063.106] lstrlenW (lpString=".bz2") returned 4
	[0063.106] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0063.106] lstrlenW (lpString=".7z") returned 3
	[0063.106] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0063.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 63
	[0063.106] lstrlenW (lpString=".dbf") returned 4
	[0063.106] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0063.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 63
	[0063.106] lstrlenW (lpString=".1cd") returned 4
	[0063.106] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0063.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 63
	[0063.106] lstrlenW (lpString=".jpg") returned 4
	[0063.106] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0063.107] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.107] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0063.108] GetLastError () returned 0x0
	[0063.108] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x4780, lpOverlapped=0x0) returned 1
	[0063.111] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x4790, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x4790, lpOverlapped=0x0) returned 1
	[0063.113] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.113] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.113] SetEndOfFile (hFile=0x220) returned 1
	[0063.113] CloseHandle (hObject=0x220) returned 1
	[0063.113] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.113] SetEndOfFile (hFile=0x1f8) returned 1
	[0063.114] CloseHandle (hObject=0x1f8) returned 1
	[0063.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.114] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf")) returned 1
	[0063.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 63
	[0063.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 63
	[0063.114] lstrlenW (lpString=".doc") returned 4
	[0063.115] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0063.115] lstrlenW (lpString=".docx") returned 5
	[0063.115] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0063.115] lstrlenW (lpString=".pdf") returned 4
	[0063.115] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0063.115] lstrlenW (lpString=".xls") returned 4
	[0063.115] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0063.115] lstrlenW (lpString=".xlsx") returned 5
	[0063.115] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0063.115] lstrlenW (lpString=".ppt") returned 4
	[0063.115] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0063.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 63
	[0063.115] lstrlenW (lpString=".zip") returned 4
	[0063.115] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0063.115] lstrlenW (lpString=".rar") returned 4
	[0063.115] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0063.115] lstrlenW (lpString=".bz2") returned 4
	[0063.115] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0063.115] lstrlenW (lpString=".7z") returned 3
	[0063.115] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0063.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 63
	[0063.115] lstrlenW (lpString=".dbf") returned 4
	[0063.115] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0063.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 63
	[0063.115] lstrlenW (lpString=".1cd") returned 4
	[0063.115] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0063.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 63
	[0063.115] lstrlenW (lpString=".jpg") returned 4
	[0063.115] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0063.116] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.116] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0063.116] GetLastError () returned 0x0
	[0063.116] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x2b32, lpOverlapped=0x0) returned 1
	[0063.118] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x2b40, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x2b40, lpOverlapped=0x0) returned 1
	[0063.119] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.119] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.119] SetEndOfFile (hFile=0x220) returned 1
	[0063.119] CloseHandle (hObject=0x220) returned 1
	[0063.119] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.119] SetEndOfFile (hFile=0x1f8) returned 1
	[0063.120] CloseHandle (hObject=0x1f8) returned 1
	[0063.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.120] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf")) returned 1
	[0063.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 63
	[0063.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 63
	[0063.121] lstrlenW (lpString=".doc") returned 4
	[0063.121] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0063.121] lstrlenW (lpString=".docx") returned 5
	[0063.121] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0063.121] lstrlenW (lpString=".pdf") returned 4
	[0063.121] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0063.121] lstrlenW (lpString=".xls") returned 4
	[0063.121] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0063.121] lstrlenW (lpString=".xlsx") returned 5
	[0063.121] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0063.121] lstrlenW (lpString=".ppt") returned 4
	[0063.121] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0063.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 63
	[0063.121] lstrlenW (lpString=".zip") returned 4
	[0063.121] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0063.121] lstrlenW (lpString=".rar") returned 4
	[0063.121] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0063.121] lstrlenW (lpString=".bz2") returned 4
	[0063.121] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0063.121] lstrlenW (lpString=".7z") returned 3
	[0063.121] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0063.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 63
	[0063.121] lstrlenW (lpString=".dbf") returned 4
	[0063.121] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0063.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 63
	[0063.121] lstrlenW (lpString=".1cd") returned 4
	[0063.121] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0063.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 63
	[0063.122] lstrlenW (lpString=".jpg") returned 4
	[0063.122] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0063.122] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.122] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0063.123] GetLastError () returned 0x0
	[0063.123] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x30e8, lpOverlapped=0x0) returned 1
	[0063.125] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0x30f0, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0x30f0, lpOverlapped=0x0) returned 1
	[0063.126] ReadFile (in: hFile=0x1f8, lpBuffer=0x7ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x791fed4, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesRead=0x791fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.126] WriteFile (in: hFile=0x220, lpBuffer=0x7ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x791fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7ee0020*, lpNumberOfBytesWritten=0x791fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.126] SetEndOfFile (hFile=0x220) returned 1
	[0063.126] CloseHandle (hObject=0x220) returned 1
	[0063.127] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x791fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.127] SetEndOfFile (hFile=0x1f8) returned 1
	[0063.127] CloseHandle (hObject=0x1f8) returned 1
	[0063.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.128] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf")) returned 1
	[0063.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 63
	[0063.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 63
	[0063.128] lstrlenW (lpString=".doc") returned 4
	[0063.128] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0063.128] lstrlenW (lpString=".docx") returned 5
	[0063.128] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0063.128] lstrlenW (lpString=".pdf") returned 4
	[0063.128] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0063.128] lstrlenW (lpString=".xls") returned 4
	[0063.128] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0063.128] lstrlenW (lpString=".xlsx") returned 5
	[0063.128] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0063.128] lstrlenW (lpString=".ppt") returned 4
	[0063.128] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0063.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 63
	[0063.128] lstrlenW (lpString=".zip") returned 4
	[0063.128] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0063.128] lstrlenW (lpString=".rar") returned 4
	[0063.128] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0063.128] lstrlenW (lpString=".bz2") returned 4
	[0063.129] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0063.129] lstrlenW (lpString=".7z") returned 3
	[0063.129] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0063.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 63
	[0063.129] lstrlenW (lpString=".dbf") returned 4
	[0063.129] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0063.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 63
	[0063.129] lstrlenW (lpString=".1cd") returned 4
	[0063.129] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0063.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 63
	[0063.129] lstrlenW (lpString=".jpg") returned 4
	[0063.129] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1

Thread:
	id = 11
	os_tid = 0xa3c

	[0034.803] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x542e9f0
	[0034.803] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x8130048
	[0034.803] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0908
	[0034.803] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x6) returned 0x53dd6f8
	[0034.803] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e08d8
	[0034.803] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x100000) returned 0x8230020
	[0034.804] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0920
	[0034.804] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0920, Size=0x20) returned 0x53c6228
	[0034.804] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0920
	[0034.804] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0920, Size=0x20) returned 0x53c6200
	[0034.804] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0034.804] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0034.804] Wow64DisableWow64FsRedirection (in: OldValue=0x7a1ff58 | out: OldValue=0x7a1ff58*=0x0) returned 1
	[0034.804] lstrlenW (lpString="kernel32.dll") returned 12
	[0034.804] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6228 | out: hHeap=0x5350000) returned 1
	[0034.804] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0034.804] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6200 | out: hHeap=0x5350000) returned 1
	[0034.804] Sleep (dwMilliseconds=0x64) 
	[0035.155] Sleep (dwMilliseconds=0x64) 
	[0035.808] Sleep (dwMilliseconds=0x64) 
	[0036.089] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.089] lstrlenW (lpString="Setup.xml") returned 9
	[0036.089] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.260] GetFileSizeEx (in: hFile=0x188, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=2296) returned 1
	[0036.260] CloseHandle (hObject=0x188) returned 1
	[0036.260] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.260] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.260] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.260] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.261] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.261] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0036.615] GetLastError () returned 0x0
	[0036.615] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x8f8, lpOverlapped=0x0) returned 1
	[0036.645] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x900, lpOverlapped=0x0) returned 1
	[0036.646] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.646] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.646] SetEndOfFile (hFile=0x1b0) returned 1
	[0036.646] CloseHandle (hObject=0x1b0) returned 1
	[0036.647] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.647] SetEndOfFile (hFile=0x188) returned 1
	[0036.648] CloseHandle (hObject=0x188) returned 1
	[0036.648] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.648] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.648] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.648] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.648] lstrlenW (lpString=".doc") returned 4
	[0036.648] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.648] lstrlenW (lpString=".docx") returned 5
	[0036.648] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.648] lstrlenW (lpString=".pdf") returned 4
	[0036.648] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.649] lstrlenW (lpString=".xls") returned 4
	[0036.649] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.649] lstrlenW (lpString=".xlsx") returned 5
	[0036.649] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.649] lstrlenW (lpString=".ppt") returned 4
	[0036.649] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.649] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.649] lstrlenW (lpString=".zip") returned 4
	[0036.649] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.649] lstrlenW (lpString=".rar") returned 4
	[0036.649] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.649] lstrlenW (lpString=".bz2") returned 4
	[0036.649] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.649] lstrlenW (lpString=".7z") returned 3
	[0036.649] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.649] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.649] lstrlenW (lpString=".dbf") returned 4
	[0036.649] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.649] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.649] lstrlenW (lpString=".1cd") returned 4
	[0036.649] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.649] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.649] lstrlenW (lpString=".jpg") returned 4
	[0036.649] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.649] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.649] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.649] lstrlenW (lpString=".doc") returned 4
	[0036.649] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.649] lstrlenW (lpString=".docx") returned 5
	[0036.649] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.649] lstrlenW (lpString=".pdf") returned 4
	[0036.649] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.649] lstrlenW (lpString=".xls") returned 4
	[0036.650] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.650] lstrlenW (lpString=".xlsx") returned 5
	[0036.650] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.650] lstrlenW (lpString=".ppt") returned 4
	[0036.650] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.650] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.650] lstrlenW (lpString=".zip") returned 4
	[0036.650] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.650] lstrlenW (lpString=".rar") returned 4
	[0036.650] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.650] lstrlenW (lpString=".bz2") returned 4
	[0036.650] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.650] lstrlenW (lpString=".7z") returned 3
	[0036.650] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.650] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.650] lstrlenW (lpString=".dbf") returned 4
	[0036.650] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.650] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.650] lstrlenW (lpString=".1cd") returned 4
	[0036.650] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.650] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.650] lstrlenW (lpString=".jpg") returned 4
	[0036.650] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.650] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.650] lstrlenW (lpString="OneNoteMUI.xml") returned 14
	[0036.650] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.651] GetFileSizeEx (in: hFile=0x188, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1606) returned 1
	[0036.651] CloseHandle (hObject=0x188) returned 1
	[0036.651] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml")) returned 0x2020
	[0036.652] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.652] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.652] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.652] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.652] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0036.652] GetLastError () returned 0x0
	[0036.653] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x646, lpOverlapped=0x0) returned 1
	[0036.654] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x650, lpOverlapped=0x0) returned 1
	[0036.655] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.655] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xf0, lpOverlapped=0x0) returned 1
	[0036.655] SetEndOfFile (hFile=0x1b0) returned 1
	[0036.655] CloseHandle (hObject=0x1b0) returned 1
	[0036.656] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.656] SetEndOfFile (hFile=0x188) returned 1
	[0036.657] CloseHandle (hObject=0x188) returned 1
	[0036.657] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.657] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml")) returned 1
	[0036.657] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0036.657] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0036.657] lstrlenW (lpString=".doc") returned 4
	[0036.657] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.657] lstrlenW (lpString=".docx") returned 5
	[0036.657] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.657] lstrlenW (lpString=".pdf") returned 4
	[0036.657] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.657] lstrlenW (lpString=".xls") returned 4
	[0036.657] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.657] lstrlenW (lpString=".xlsx") returned 5
	[0036.657] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.657] lstrlenW (lpString=".ppt") returned 4
	[0036.657] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.658] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0036.658] lstrlenW (lpString=".zip") returned 4
	[0036.658] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.658] lstrlenW (lpString=".rar") returned 4
	[0036.658] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.658] lstrlenW (lpString=".bz2") returned 4
	[0036.658] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.658] lstrlenW (lpString=".7z") returned 3
	[0036.658] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.658] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0036.658] lstrlenW (lpString=".dbf") returned 4
	[0036.658] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.658] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0036.658] lstrlenW (lpString=".1cd") returned 4
	[0036.658] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.658] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0036.658] lstrlenW (lpString=".jpg") returned 4
	[0036.658] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.658] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0036.658] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0036.658] lstrlenW (lpString=".doc") returned 4
	[0036.658] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.658] lstrlenW (lpString=".docx") returned 5
	[0036.658] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.658] lstrlenW (lpString=".pdf") returned 4
	[0036.658] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.658] lstrlenW (lpString=".xls") returned 4
	[0036.658] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.658] lstrlenW (lpString=".xlsx") returned 5
	[0036.658] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.658] lstrlenW (lpString=".ppt") returned 4
	[0036.658] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.658] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0036.659] lstrlenW (lpString=".zip") returned 4
	[0036.659] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.659] lstrlenW (lpString=".rar") returned 4
	[0036.659] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.659] lstrlenW (lpString=".bz2") returned 4
	[0036.659] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.659] lstrlenW (lpString=".7z") returned 3
	[0036.659] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.659] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0036.659] lstrlenW (lpString=".dbf") returned 4
	[0036.659] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.659] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0036.659] lstrlenW (lpString=".1cd") returned 4
	[0036.659] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.659] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 77
	[0036.659] lstrlenW (lpString=".jpg") returned 4
	[0036.659] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.659] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.659] lstrlenW (lpString="Setup.xml") returned 9
	[0036.659] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.660] GetFileSizeEx (in: hFile=0x188, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1988) returned 1
	[0036.660] CloseHandle (hObject=0x188) returned 1
	[0036.660] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.660] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.660] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.660] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.660] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.660] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0036.661] GetLastError () returned 0x0
	[0036.661] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x7c4, lpOverlapped=0x0) returned 1
	[0036.838] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x7d0, lpOverlapped=0x0) returned 1
	[0036.840] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.840] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.840] SetEndOfFile (hFile=0x1b0) returned 1
	[0036.840] CloseHandle (hObject=0x1b0) returned 1
	[0036.841] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.841] SetEndOfFile (hFile=0x188) returned 1
	[0036.841] CloseHandle (hObject=0x188) returned 1
	[0036.841] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.842] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.842] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.842] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.842] lstrlenW (lpString=".doc") returned 4
	[0036.842] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.842] lstrlenW (lpString=".docx") returned 5
	[0036.842] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.842] lstrlenW (lpString=".pdf") returned 4
	[0036.842] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.842] lstrlenW (lpString=".xls") returned 4
	[0036.842] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.842] lstrlenW (lpString=".xlsx") returned 5
	[0036.842] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.842] lstrlenW (lpString=".ppt") returned 4
	[0036.842] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.842] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.842] lstrlenW (lpString=".zip") returned 4
	[0036.842] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.842] lstrlenW (lpString=".rar") returned 4
	[0036.842] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.842] lstrlenW (lpString=".bz2") returned 4
	[0036.842] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.843] lstrlenW (lpString=".7z") returned 3
	[0036.843] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.843] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.843] lstrlenW (lpString=".dbf") returned 4
	[0036.843] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.843] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.843] lstrlenW (lpString=".1cd") returned 4
	[0036.843] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.843] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.843] lstrlenW (lpString=".jpg") returned 4
	[0036.843] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.843] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.843] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.843] lstrlenW (lpString=".doc") returned 4
	[0036.843] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.843] lstrlenW (lpString=".docx") returned 5
	[0036.843] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.843] lstrlenW (lpString=".pdf") returned 4
	[0036.843] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.843] lstrlenW (lpString=".xls") returned 4
	[0036.843] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.843] lstrlenW (lpString=".xlsx") returned 5
	[0036.843] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.843] lstrlenW (lpString=".ppt") returned 4
	[0036.843] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.843] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.843] lstrlenW (lpString=".zip") returned 4
	[0036.843] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.843] lstrlenW (lpString=".rar") returned 4
	[0036.843] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.843] lstrlenW (lpString=".bz2") returned 4
	[0036.843] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.844] lstrlenW (lpString=".7z") returned 3
	[0036.844] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.844] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.844] lstrlenW (lpString=".dbf") returned 4
	[0036.844] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.844] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.844] lstrlenW (lpString=".1cd") returned 4
	[0036.844] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.844] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.844] lstrlenW (lpString=".jpg") returned 4
	[0036.844] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.844] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.844] lstrlenW (lpString="OfficeMUI.xml") returned 13
	[0036.844] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.844] GetFileSizeEx (in: hFile=0x188, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=5557) returned 1
	[0036.844] CloseHandle (hObject=0x188) returned 1
	[0036.844] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml")) returned 0x2020
	[0036.844] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.845] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.845] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.845] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.845] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0036.845] GetLastError () returned 0x0
	[0036.845] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x15b5, lpOverlapped=0x0) returned 1
	[0036.848] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x15c0, lpOverlapped=0x0) returned 1
	[0036.850] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.850] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xee, lpOverlapped=0x0) returned 1
	[0036.850] SetEndOfFile (hFile=0x1b0) returned 1
	[0036.850] CloseHandle (hObject=0x1b0) returned 1
	[0036.851] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.851] SetEndOfFile (hFile=0x188) returned 1
	[0036.852] CloseHandle (hObject=0x188) returned 1
	[0036.852] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.852] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml")) returned 1
	[0036.852] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0036.852] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0036.852] lstrlenW (lpString=".doc") returned 4
	[0036.852] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.852] lstrlenW (lpString=".docx") returned 5
	[0036.852] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.852] lstrlenW (lpString=".pdf") returned 4
	[0036.852] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.852] lstrlenW (lpString=".xls") returned 4
	[0036.852] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.852] lstrlenW (lpString=".xlsx") returned 5
	[0036.852] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.852] lstrlenW (lpString=".ppt") returned 4
	[0036.852] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.852] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0036.853] lstrlenW (lpString=".zip") returned 4
	[0036.853] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.853] lstrlenW (lpString=".rar") returned 4
	[0036.853] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.853] lstrlenW (lpString=".bz2") returned 4
	[0036.853] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.853] lstrlenW (lpString=".7z") returned 3
	[0036.853] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.853] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0036.853] lstrlenW (lpString=".dbf") returned 4
	[0036.853] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.853] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0036.853] lstrlenW (lpString=".1cd") returned 4
	[0036.853] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.853] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0036.853] lstrlenW (lpString=".jpg") returned 4
	[0036.853] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.853] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0036.853] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0036.853] lstrlenW (lpString=".doc") returned 4
	[0036.853] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.853] lstrlenW (lpString=".docx") returned 5
	[0036.853] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.853] lstrlenW (lpString=".pdf") returned 4
	[0036.853] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.853] lstrlenW (lpString=".xls") returned 4
	[0036.853] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.853] lstrlenW (lpString=".xlsx") returned 5
	[0036.853] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.853] lstrlenW (lpString=".ppt") returned 4
	[0036.853] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.853] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0036.853] lstrlenW (lpString=".zip") returned 4
	[0036.854] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.854] lstrlenW (lpString=".rar") returned 4
	[0036.854] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.854] lstrlenW (lpString=".bz2") returned 4
	[0036.854] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.854] lstrlenW (lpString=".7z") returned 3
	[0036.854] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.854] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0036.854] lstrlenW (lpString=".dbf") returned 4
	[0036.854] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.854] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0036.854] lstrlenW (lpString=".1cd") returned 4
	[0036.854] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.854] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 76
	[0036.854] lstrlenW (lpString=".jpg") returned 4
	[0036.854] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.854] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.854] lstrlenW (lpString="OfficeMUISet.xml") returned 16
	[0036.854] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.854] GetFileSizeEx (in: hFile=0x188, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=819) returned 1
	[0036.854] CloseHandle (hObject=0x188) returned 1
	[0036.855] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml")) returned 0x2020
	[0036.855] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.855] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.855] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.855] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.855] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0036.855] GetLastError () returned 0x0
	[0036.855] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x333, lpOverlapped=0x0) returned 1
	[0036.863] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x340, lpOverlapped=0x0) returned 1
	[0036.864] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.864] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xf4, lpOverlapped=0x0) returned 1
	[0036.864] SetEndOfFile (hFile=0x1b0) returned 1
	[0036.864] CloseHandle (hObject=0x1b0) returned 1
	[0036.864] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.864] SetEndOfFile (hFile=0x188) returned 1
	[0036.865] CloseHandle (hObject=0x188) returned 1
	[0036.865] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.865] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml")) returned 1
	[0036.866] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0036.866] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0036.866] lstrlenW (lpString=".doc") returned 4
	[0036.866] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.866] lstrlenW (lpString=".docx") returned 5
	[0036.866] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0036.866] lstrlenW (lpString=".pdf") returned 4
	[0036.866] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.866] lstrlenW (lpString=".xls") returned 4
	[0036.866] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.866] lstrlenW (lpString=".xlsx") returned 5
	[0036.866] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0036.866] lstrlenW (lpString=".ppt") returned 4
	[0036.866] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.866] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0036.866] lstrlenW (lpString=".zip") returned 4
	[0036.866] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.866] lstrlenW (lpString=".rar") returned 4
	[0036.866] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.866] lstrlenW (lpString=".bz2") returned 4
	[0036.866] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.866] lstrlenW (lpString=".7z") returned 3
	[0036.867] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.867] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0036.867] lstrlenW (lpString=".dbf") returned 4
	[0036.867] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.867] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0036.867] lstrlenW (lpString=".1cd") returned 4
	[0036.867] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.867] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0036.867] lstrlenW (lpString=".jpg") returned 4
	[0036.867] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.867] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0036.867] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0036.867] lstrlenW (lpString=".doc") returned 4
	[0036.867] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.867] lstrlenW (lpString=".docx") returned 5
	[0036.867] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0036.867] lstrlenW (lpString=".pdf") returned 4
	[0036.867] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.867] lstrlenW (lpString=".xls") returned 4
	[0036.867] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.867] lstrlenW (lpString=".xlsx") returned 5
	[0036.867] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0036.867] lstrlenW (lpString=".ppt") returned 4
	[0036.867] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.867] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0036.867] lstrlenW (lpString=".zip") returned 4
	[0036.867] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.867] lstrlenW (lpString=".rar") returned 4
	[0036.867] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.867] lstrlenW (lpString=".bz2") returned 4
	[0036.867] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.867] lstrlenW (lpString=".7z") returned 3
	[0036.868] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.868] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0036.868] lstrlenW (lpString=".dbf") returned 4
	[0036.868] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.868] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0036.868] lstrlenW (lpString=".1cd") returned 4
	[0036.868] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.868] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 79
	[0036.868] lstrlenW (lpString=".jpg") returned 4
	[0036.868] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.868] lstrcmpiW (lpString1=".chm", lpString2=".beets") returned 1
	[0036.868] lstrlenW (lpString="setup.chm") returned 9
	[0036.868] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.868] GetFileSizeEx (in: hFile=0x188, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=67190) returned 1
	[0036.868] CloseHandle (hObject=0x188) returned 1
	[0036.868] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm")) returned 0x2020
	[0036.868] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.869] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.869] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.869] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.869] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0036.869] GetLastError () returned 0x0
	[0036.869] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x10676, lpOverlapped=0x0) returned 1
	[0036.872] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x10680, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x10680, lpOverlapped=0x0) returned 1
	[0036.874] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.874] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.874] SetEndOfFile (hFile=0x1b0) returned 1
	[0036.874] CloseHandle (hObject=0x1b0) returned 1
	[0036.876] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.876] SetEndOfFile (hFile=0x188) returned 1
	[0036.877] CloseHandle (hObject=0x188) returned 1
	[0036.877] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.877] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm")) returned 1
	[0036.877] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72
	[0036.877] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72
	[0036.877] lstrlenW (lpString=".doc") returned 4
	[0036.877] lstrcmpiW (lpString1=".doc", lpString2=".chm") returned 1
	[0036.877] lstrlenW (lpString=".docx") returned 5
	[0036.877] lstrcmpiW (lpString1=".docx", lpString2="p.chm") returned -1
	[0036.877] lstrlenW (lpString=".pdf") returned 4
	[0036.877] lstrcmpiW (lpString1=".pdf", lpString2=".chm") returned 1
	[0036.877] lstrlenW (lpString=".xls") returned 4
	[0036.877] lstrcmpiW (lpString1=".xls", lpString2=".chm") returned 1
	[0036.878] lstrlenW (lpString=".xlsx") returned 5
	[0036.878] lstrcmpiW (lpString1=".xlsx", lpString2="p.chm") returned -1
	[0036.878] lstrlenW (lpString=".ppt") returned 4
	[0036.878] lstrcmpiW (lpString1=".ppt", lpString2=".chm") returned 1
	[0036.878] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72
	[0036.878] lstrlenW (lpString=".zip") returned 4
	[0036.878] lstrcmpiW (lpString1=".zip", lpString2=".chm") returned 1
	[0036.878] lstrlenW (lpString=".rar") returned 4
	[0036.878] lstrcmpiW (lpString1=".rar", lpString2=".chm") returned 1
	[0036.878] lstrlenW (lpString=".bz2") returned 4
	[0036.878] lstrcmpiW (lpString1=".bz2", lpString2=".chm") returned -1
	[0036.878] lstrlenW (lpString=".7z") returned 3
	[0036.878] lstrcmpiW (lpString1=".7z", lpString2="chm") returned -1
	[0036.878] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72
	[0036.878] lstrlenW (lpString=".dbf") returned 4
	[0036.878] lstrcmpiW (lpString1=".dbf", lpString2=".chm") returned 1
	[0036.878] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72
	[0036.878] lstrlenW (lpString=".1cd") returned 4
	[0036.878] lstrcmpiW (lpString1=".1cd", lpString2=".chm") returned -1
	[0036.878] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72
	[0036.878] lstrlenW (lpString=".jpg") returned 4
	[0036.878] lstrcmpiW (lpString1=".jpg", lpString2=".chm") returned 1
	[0036.878] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72
	[0036.878] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72
	[0036.878] lstrlenW (lpString=".doc") returned 4
	[0036.878] lstrcmpiW (lpString1=".doc", lpString2=".chm") returned 1
	[0036.878] lstrlenW (lpString=".docx") returned 5
	[0036.878] lstrcmpiW (lpString1=".docx", lpString2="p.chm") returned -1
	[0036.878] lstrlenW (lpString=".pdf") returned 4
	[0036.878] lstrcmpiW (lpString1=".pdf", lpString2=".chm") returned 1
	[0036.878] lstrlenW (lpString=".xls") returned 4
	[0036.878] lstrcmpiW (lpString1=".xls", lpString2=".chm") returned 1
	[0036.879] lstrlenW (lpString=".xlsx") returned 5
	[0036.879] lstrcmpiW (lpString1=".xlsx", lpString2="p.chm") returned -1
	[0036.879] lstrlenW (lpString=".ppt") returned 4
	[0036.879] lstrcmpiW (lpString1=".ppt", lpString2=".chm") returned 1
	[0036.879] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72
	[0036.879] lstrlenW (lpString=".zip") returned 4
	[0036.879] lstrcmpiW (lpString1=".zip", lpString2=".chm") returned 1
	[0036.879] lstrlenW (lpString=".rar") returned 4
	[0036.879] lstrcmpiW (lpString1=".rar", lpString2=".chm") returned 1
	[0036.879] lstrlenW (lpString=".bz2") returned 4
	[0036.879] lstrcmpiW (lpString1=".bz2", lpString2=".chm") returned -1
	[0036.879] lstrlenW (lpString=".7z") returned 3
	[0036.879] lstrcmpiW (lpString1=".7z", lpString2="chm") returned -1
	[0036.879] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72
	[0036.879] lstrlenW (lpString=".dbf") returned 4
	[0036.879] lstrcmpiW (lpString1=".dbf", lpString2=".chm") returned 1
	[0036.879] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72
	[0036.879] lstrlenW (lpString=".1cd") returned 4
	[0036.879] lstrcmpiW (lpString1=".1cd", lpString2=".chm") returned -1
	[0036.879] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 72
	[0036.879] lstrlenW (lpString=".jpg") returned 4
	[0036.879] lstrcmpiW (lpString1=".jpg", lpString2=".chm") returned 1
	[0036.879] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.879] lstrlenW (lpString="Setup.xml") returned 9
	[0036.879] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.880] GetFileSizeEx (in: hFile=0x188, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=9352) returned 1
	[0036.880] CloseHandle (hObject=0x188) returned 1
	[0036.880] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.880] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.880] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.880] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.880] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.880] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0036.880] GetLastError () returned 0x0
	[0036.880] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x2488, lpOverlapped=0x0) returned 1
	[0036.882] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x2490, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x2490, lpOverlapped=0x0) returned 1
	[0036.883] ReadFile (in: hFile=0x188, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.883] WriteFile (in: hFile=0x1b0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.883] SetEndOfFile (hFile=0x1b0) returned 1
	[0036.883] CloseHandle (hObject=0x1b0) returned 1
	[0036.884] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.884] SetEndOfFile (hFile=0x188) returned 1
	[0036.885] CloseHandle (hObject=0x188) returned 1
	[0036.885] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.885] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.885] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.885] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.885] lstrlenW (lpString=".doc") returned 4
	[0036.885] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.886] lstrlenW (lpString=".docx") returned 5
	[0036.886] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.886] lstrlenW (lpString=".pdf") returned 4
	[0036.886] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.886] lstrlenW (lpString=".xls") returned 4
	[0036.886] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.886] lstrlenW (lpString=".xlsx") returned 5
	[0036.886] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.886] lstrlenW (lpString=".ppt") returned 4
	[0036.886] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.326] lstrlenW (lpString=".zip") returned 4
	[0037.326] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.326] lstrlenW (lpString=".rar") returned 4
	[0037.326] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.326] lstrlenW (lpString=".bz2") returned 4
	[0037.326] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.326] lstrlenW (lpString=".7z") returned 3
	[0037.326] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.326] lstrlenW (lpString=".dbf") returned 4
	[0037.326] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.326] lstrlenW (lpString=".1cd") returned 4
	[0037.326] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.326] lstrlenW (lpString=".jpg") returned 4
	[0037.326] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.326] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.327] lstrlenW (lpString=".doc") returned 4
	[0037.327] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.327] lstrlenW (lpString=".docx") returned 5
	[0037.327] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0037.327] lstrlenW (lpString=".pdf") returned 4
	[0037.327] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.327] lstrlenW (lpString=".xls") returned 4
	[0037.327] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.327] lstrlenW (lpString=".xlsx") returned 5
	[0037.327] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0037.327] lstrlenW (lpString=".ppt") returned 4
	[0037.327] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.327] lstrlenW (lpString=".zip") returned 4
	[0037.327] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.327] lstrlenW (lpString=".rar") returned 4
	[0037.327] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.327] lstrlenW (lpString=".bz2") returned 4
	[0037.327] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.327] lstrlenW (lpString=".7z") returned 3
	[0037.327] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.327] lstrlenW (lpString=".dbf") returned 4
	[0037.327] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.327] lstrlenW (lpString=".1cd") returned 4
	[0037.327] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.327] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.327] lstrlenW (lpString=".jpg") returned 4
	[0037.327] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.328] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0037.328] lstrlenW (lpString="AccessMUISet.xml") returned 16
	[0037.328] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0
	[0037.328] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=819) returned 1
	[0037.328] CloseHandle (hObject=0x1d0) returned 1
	[0037.328] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml")) returned 0x2020
	[0037.328] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0037.328] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0
	[0037.328] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.328] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.328] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0037.520] GetLastError () returned 0x0
	[0037.520] ReadFile (in: hFile=0x1d0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x333, lpOverlapped=0x0) returned 1
	[0037.598] WriteFile (in: hFile=0x190, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x340, lpOverlapped=0x0) returned 1
	[0037.599] ReadFile (in: hFile=0x1d0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0037.599] WriteFile (in: hFile=0x190, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xf4, lpOverlapped=0x0) returned 1
	[0037.599] SetEndOfFile (hFile=0x190) returned 1
	[0037.599] CloseHandle (hObject=0x190) returned 1
	[0037.600] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.600] SetEndOfFile (hFile=0x1d0) returned 1
	[0037.601] CloseHandle (hObject=0x1d0) returned 1
	[0037.601] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0037.601] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml")) returned 1
	[0037.602] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0037.602] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0037.602] lstrlenW (lpString=".doc") returned 4
	[0037.602] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.602] lstrlenW (lpString=".docx") returned 5
	[0037.602] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0037.602] lstrlenW (lpString=".pdf") returned 4
	[0037.602] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.602] lstrlenW (lpString=".xls") returned 4
	[0037.602] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.602] lstrlenW (lpString=".xlsx") returned 5
	[0037.602] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0037.602] lstrlenW (lpString=".ppt") returned 4
	[0037.602] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.602] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0037.602] lstrlenW (lpString=".zip") returned 4
	[0037.602] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.602] lstrlenW (lpString=".rar") returned 4
	[0037.602] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.602] lstrlenW (lpString=".bz2") returned 4
	[0037.602] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.602] lstrlenW (lpString=".7z") returned 3
	[0037.602] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.602] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0037.602] lstrlenW (lpString=".dbf") returned 4
	[0037.602] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.602] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0037.602] lstrlenW (lpString=".1cd") returned 4
	[0037.602] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.602] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0037.602] lstrlenW (lpString=".jpg") returned 4
	[0037.603] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.603] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0037.603] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0037.603] lstrlenW (lpString=".doc") returned 4
	[0037.603] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.603] lstrlenW (lpString=".docx") returned 5
	[0037.603] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0037.603] lstrlenW (lpString=".pdf") returned 4
	[0037.603] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.603] lstrlenW (lpString=".xls") returned 4
	[0037.603] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.603] lstrlenW (lpString=".xlsx") returned 5
	[0037.603] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0037.603] lstrlenW (lpString=".ppt") returned 4
	[0037.603] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.603] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0037.603] lstrlenW (lpString=".zip") returned 4
	[0037.603] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.603] lstrlenW (lpString=".rar") returned 4
	[0037.603] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.603] lstrlenW (lpString=".bz2") returned 4
	[0037.603] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.603] lstrlenW (lpString=".7z") returned 3
	[0037.603] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.603] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0037.603] lstrlenW (lpString=".dbf") returned 4
	[0037.603] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.603] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0037.604] lstrlenW (lpString=".1cd") returned 4
	[0037.604] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.604] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 79
	[0037.604] lstrlenW (lpString=".jpg") returned 4
	[0037.604] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.604] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0037.604] lstrlenW (lpString="Setup.xml") returned 9
	[0037.604] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0
	[0037.620] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=31094) returned 1
	[0037.620] CloseHandle (hObject=0x1d0) returned 1
	[0037.620] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0037.620] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0037.620] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0
	[0037.620] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.620] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.620] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0037.620] GetLastError () returned 0x0
	[0037.620] ReadFile (in: hFile=0x1d0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x7976, lpOverlapped=0x0) returned 1
	[0037.622] WriteFile (in: hFile=0x190, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x7980, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x7980, lpOverlapped=0x0) returned 1
	[0037.624] ReadFile (in: hFile=0x1d0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0037.624] WriteFile (in: hFile=0x190, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0037.624] SetEndOfFile (hFile=0x190) returned 1
	[0037.624] CloseHandle (hObject=0x190) returned 1
	[0037.625] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.625] SetEndOfFile (hFile=0x1d0) returned 1
	[0037.626] CloseHandle (hObject=0x1d0) returned 1
	[0037.626] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0037.626] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0037.627] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.627] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.627] lstrlenW (lpString=".doc") returned 4
	[0037.627] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.627] lstrlenW (lpString=".docx") returned 5
	[0037.627] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0037.627] lstrlenW (lpString=".pdf") returned 4
	[0037.627] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.627] lstrlenW (lpString=".xls") returned 4
	[0037.627] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.627] lstrlenW (lpString=".xlsx") returned 5
	[0037.627] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0037.627] lstrlenW (lpString=".ppt") returned 4
	[0037.627] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.627] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.627] lstrlenW (lpString=".zip") returned 4
	[0037.627] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.627] lstrlenW (lpString=".rar") returned 4
	[0037.627] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.627] lstrlenW (lpString=".bz2") returned 4
	[0037.627] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.627] lstrlenW (lpString=".7z") returned 3
	[0037.627] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.627] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.627] lstrlenW (lpString=".dbf") returned 4
	[0037.627] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.627] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.627] lstrlenW (lpString=".1cd") returned 4
	[0037.627] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.627] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.628] lstrlenW (lpString=".jpg") returned 4
	[0037.628] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.628] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.628] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.628] lstrlenW (lpString=".doc") returned 4
	[0037.628] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.628] lstrlenW (lpString=".docx") returned 5
	[0037.628] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0037.628] lstrlenW (lpString=".pdf") returned 4
	[0037.628] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.628] lstrlenW (lpString=".xls") returned 4
	[0037.628] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.628] lstrlenW (lpString=".xlsx") returned 5
	[0037.628] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0037.628] lstrlenW (lpString=".ppt") returned 4
	[0037.628] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.628] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.628] lstrlenW (lpString=".zip") returned 4
	[0037.628] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.628] lstrlenW (lpString=".rar") returned 4
	[0037.628] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.628] lstrlenW (lpString=".bz2") returned 4
	[0037.628] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.628] lstrlenW (lpString=".7z") returned 3
	[0037.628] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.628] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.628] lstrlenW (lpString=".dbf") returned 4
	[0037.628] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.628] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.628] lstrlenW (lpString=".1cd") returned 4
	[0037.628] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.628] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0037.629] lstrlenW (lpString=".jpg") returned 4
	[0037.629] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.629] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0037.629] lstrlenW (lpString="Office32WW.xml") returned 14
	[0037.629] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0
	[0037.630] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=4274) returned 1
	[0037.630] CloseHandle (hObject=0x1d0) returned 1
	[0037.630] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020
	[0037.630] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0037.630] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0
	[0037.630] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.630] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.630] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0037.630] GetLastError () returned 0x0
	[0037.630] ReadFile (in: hFile=0x1d0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x10b2, lpOverlapped=0x0) returned 1
	[0037.632] WriteFile (in: hFile=0x190, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x10c0, lpOverlapped=0x0) returned 1
	[0037.633] ReadFile (in: hFile=0x1d0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0037.633] WriteFile (in: hFile=0x190, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xf0, lpOverlapped=0x0) returned 1
	[0037.633] SetEndOfFile (hFile=0x190) returned 1
	[0037.633] CloseHandle (hObject=0x190) returned 1
	[0037.634] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.634] SetEndOfFile (hFile=0x1d0) returned 1
	[0037.634] CloseHandle (hObject=0x1d0) returned 1
	[0037.635] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0037.635] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1
	[0037.635] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0037.635] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0037.635] lstrlenW (lpString=".doc") returned 4
	[0037.635] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.635] lstrlenW (lpString=".docx") returned 5
	[0037.635] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1
	[0037.635] lstrlenW (lpString=".pdf") returned 4
	[0037.635] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.635] lstrlenW (lpString=".xls") returned 4
	[0037.635] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.635] lstrlenW (lpString=".xlsx") returned 5
	[0037.635] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1
	[0037.635] lstrlenW (lpString=".ppt") returned 4
	[0037.635] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.635] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0037.635] lstrlenW (lpString=".zip") returned 4
	[0037.635] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.635] lstrlenW (lpString=".rar") returned 4
	[0037.636] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.636] lstrlenW (lpString=".bz2") returned 4
	[0037.636] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.636] lstrlenW (lpString=".7z") returned 3
	[0037.636] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.636] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0037.636] lstrlenW (lpString=".dbf") returned 4
	[0037.636] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.636] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0037.636] lstrlenW (lpString=".1cd") returned 4
	[0037.636] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.636] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0037.636] lstrlenW (lpString=".jpg") returned 4
	[0037.636] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.636] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0037.636] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0037.636] lstrlenW (lpString=".doc") returned 4
	[0037.636] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.636] lstrlenW (lpString=".docx") returned 5
	[0037.636] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1
	[0037.636] lstrlenW (lpString=".pdf") returned 4
	[0037.636] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.636] lstrlenW (lpString=".xls") returned 4
	[0037.636] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.636] lstrlenW (lpString=".xlsx") returned 5
	[0037.636] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1
	[0037.636] lstrlenW (lpString=".ppt") returned 4
	[0037.636] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.636] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0037.636] lstrlenW (lpString=".zip") returned 4
	[0037.636] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.636] lstrlenW (lpString=".rar") returned 4
	[0037.637] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.637] lstrlenW (lpString=".bz2") returned 4
	[0037.637] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.637] lstrlenW (lpString=".7z") returned 3
	[0037.637] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.637] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0037.637] lstrlenW (lpString=".dbf") returned 4
	[0037.637] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.637] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0037.637] lstrlenW (lpString=".1cd") returned 4
	[0037.637] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.637] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0037.637] lstrlenW (lpString=".jpg") returned 4
	[0037.637] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.637] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0037.637] lstrlenW (lpString="PrjProrWW.xml") returned 13
	[0037.637] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0
	[0037.638] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=6421) returned 1
	[0037.638] CloseHandle (hObject=0x1d0) returned 1
	[0037.638] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml")) returned 0x2020
	[0037.638] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0037.638] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0
	[0037.638] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.638] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.638] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0037.639] GetLastError () returned 0x0
	[0037.639] ReadFile (in: hFile=0x1d0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x1915, lpOverlapped=0x0) returned 1
	[0037.640] WriteFile (in: hFile=0x190, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x1920, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x1920, lpOverlapped=0x0) returned 1
	[0037.641] ReadFile (in: hFile=0x1d0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0037.641] WriteFile (in: hFile=0x190, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xee, lpOverlapped=0x0) returned 1
	[0037.641] SetEndOfFile (hFile=0x190) returned 1
	[0037.641] CloseHandle (hObject=0x190) returned 1
	[0037.642] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.642] SetEndOfFile (hFile=0x1d0) returned 1
	[0037.643] CloseHandle (hObject=0x1d0) returned 1
	[0037.643] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0037.643] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml")) returned 1
	[0037.643] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0037.643] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0037.643] lstrlenW (lpString=".doc") returned 4
	[0037.643] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.643] lstrlenW (lpString=".docx") returned 5
	[0037.643] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1
	[0037.643] lstrlenW (lpString=".pdf") returned 4
	[0037.644] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.644] lstrlenW (lpString=".xls") returned 4
	[0037.644] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.644] lstrlenW (lpString=".xlsx") returned 5
	[0037.644] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1
	[0037.644] lstrlenW (lpString=".ppt") returned 4
	[0037.644] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.644] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0037.644] lstrlenW (lpString=".zip") returned 4
	[0037.644] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.644] lstrlenW (lpString=".rar") returned 4
	[0037.644] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.644] lstrlenW (lpString=".bz2") returned 4
	[0037.644] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.644] lstrlenW (lpString=".7z") returned 3
	[0037.644] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.644] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0037.644] lstrlenW (lpString=".dbf") returned 4
	[0037.644] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.644] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0037.644] lstrlenW (lpString=".1cd") returned 4
	[0037.644] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.644] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0037.644] lstrlenW (lpString=".jpg") returned 4
	[0037.644] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.644] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0037.644] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0037.644] lstrlenW (lpString=".doc") returned 4
	[0037.644] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.644] lstrlenW (lpString=".docx") returned 5
	[0037.644] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1
	[0037.644] lstrlenW (lpString=".pdf") returned 4
	[0037.645] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.645] lstrlenW (lpString=".xls") returned 4
	[0037.645] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.645] lstrlenW (lpString=".xlsx") returned 5
	[0037.645] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1
	[0037.645] lstrlenW (lpString=".ppt") returned 4
	[0037.645] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.645] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0037.645] lstrlenW (lpString=".zip") returned 4
	[0037.645] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.645] lstrlenW (lpString=".rar") returned 4
	[0037.645] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.645] lstrlenW (lpString=".bz2") returned 4
	[0037.645] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.645] lstrlenW (lpString=".7z") returned 3
	[0037.645] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.645] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0037.645] lstrlenW (lpString=".dbf") returned 4
	[0037.645] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.645] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0037.645] lstrlenW (lpString=".1cd") returned 4
	[0037.645] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.645] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 76
	[0037.645] lstrlenW (lpString=".jpg") returned 4
	[0037.645] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.645] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0037.645] lstrlenW (lpString="Setup.xml") returned 9
	[0037.645] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0
	[0037.646] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=16683) returned 1
	[0037.646] CloseHandle (hObject=0x1d0) returned 1
	[0037.646] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0037.646] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0037.646] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0
	[0037.646] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.646] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.646] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0037.947] GetLastError () returned 0x0
	[0037.947] ReadFile (in: hFile=0x1d0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x412b, lpOverlapped=0x0) returned 1
	[0037.954] WriteFile (in: hFile=0x1d8, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x4130, lpOverlapped=0x0) returned 1
	[0037.955] ReadFile (in: hFile=0x1d0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0037.955] WriteFile (in: hFile=0x1d8, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0037.955] SetEndOfFile (hFile=0x1d8) returned 1
	[0037.955] CloseHandle (hObject=0x1d8) returned 1
	[0037.956] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.956] SetEndOfFile (hFile=0x1d0) returned 1
	[0037.957] CloseHandle (hObject=0x1d0) returned 1
	[0037.957] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0037.957] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0038.206] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.206] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.206] lstrlenW (lpString=".doc") returned 4
	[0038.206] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.206] lstrlenW (lpString=".docx") returned 5
	[0038.206] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0038.206] lstrlenW (lpString=".pdf") returned 4
	[0038.206] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.206] lstrlenW (lpString=".xls") returned 4
	[0038.206] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.206] lstrlenW (lpString=".xlsx") returned 5
	[0038.206] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0038.206] lstrlenW (lpString=".ppt") returned 4
	[0038.206] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.206] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.206] lstrlenW (lpString=".zip") returned 4
	[0038.206] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.206] lstrlenW (lpString=".rar") returned 4
	[0038.206] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.206] lstrlenW (lpString=".bz2") returned 4
	[0038.206] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.206] lstrlenW (lpString=".7z") returned 3
	[0038.206] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.206] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.206] lstrlenW (lpString=".dbf") returned 4
	[0038.206] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.206] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.206] lstrlenW (lpString=".1cd") returned 4
	[0038.207] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.207] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.207] lstrlenW (lpString=".jpg") returned 4
	[0038.207] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.207] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.207] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.207] lstrlenW (lpString=".doc") returned 4
	[0038.207] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.207] lstrlenW (lpString=".docx") returned 5
	[0038.207] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0038.207] lstrlenW (lpString=".pdf") returned 4
	[0038.207] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.207] lstrlenW (lpString=".xls") returned 4
	[0038.207] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.207] lstrlenW (lpString=".xlsx") returned 5
	[0038.207] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0038.207] lstrlenW (lpString=".ppt") returned 4
	[0038.207] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.207] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.207] lstrlenW (lpString=".zip") returned 4
	[0038.207] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.207] lstrlenW (lpString=".rar") returned 4
	[0038.207] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.207] lstrlenW (lpString=".bz2") returned 4
	[0038.207] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.207] lstrlenW (lpString=".7z") returned 3
	[0038.207] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.207] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.207] lstrlenW (lpString=".dbf") returned 4
	[0038.207] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.207] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.207] lstrlenW (lpString=".1cd") returned 4
	[0038.208] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.208] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.208] lstrlenW (lpString=".jpg") returned 4
	[0038.208] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.208] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0038.208] lstrlenW (lpString="Office32WW.xml") returned 14
	[0038.208] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0038.209] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=4274) returned 1
	[0038.209] CloseHandle (hObject=0x1a0) returned 1
	[0038.209] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020
	[0038.209] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.209] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0038.209] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.209] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.209] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0038.210] GetLastError () returned 0x0
	[0038.210] ReadFile (in: hFile=0x1a0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x10b2, lpOverlapped=0x0) returned 1
	[0038.213] WriteFile (in: hFile=0x1d4, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x10c0, lpOverlapped=0x0) returned 1
	[0038.214] ReadFile (in: hFile=0x1a0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0038.214] WriteFile (in: hFile=0x1d4, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xf0, lpOverlapped=0x0) returned 1
	[0038.215] SetEndOfFile (hFile=0x1d4) returned 1
	[0038.215] CloseHandle (hObject=0x1d4) returned 1
	[0038.215] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.215] SetEndOfFile (hFile=0x1a0) returned 1
	[0038.216] CloseHandle (hObject=0x1a0) returned 1
	[0038.216] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0038.216] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1
	[0038.217] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.217] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.217] lstrlenW (lpString=".doc") returned 4
	[0038.217] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.217] lstrlenW (lpString=".docx") returned 5
	[0038.217] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1
	[0038.217] lstrlenW (lpString=".pdf") returned 4
	[0038.217] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.217] lstrlenW (lpString=".xls") returned 4
	[0038.217] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.217] lstrlenW (lpString=".xlsx") returned 5
	[0038.217] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1
	[0038.217] lstrlenW (lpString=".ppt") returned 4
	[0038.217] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.217] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.217] lstrlenW (lpString=".zip") returned 4
	[0038.217] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.217] lstrlenW (lpString=".rar") returned 4
	[0038.217] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.217] lstrlenW (lpString=".bz2") returned 4
	[0038.217] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.217] lstrlenW (lpString=".7z") returned 3
	[0038.217] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.217] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.217] lstrlenW (lpString=".dbf") returned 4
	[0038.217] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.217] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.217] lstrlenW (lpString=".1cd") returned 4
	[0038.218] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.218] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.218] lstrlenW (lpString=".jpg") returned 4
	[0038.218] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.218] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.218] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.218] lstrlenW (lpString=".doc") returned 4
	[0038.218] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.218] lstrlenW (lpString=".docx") returned 5
	[0038.218] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1
	[0038.218] lstrlenW (lpString=".pdf") returned 4
	[0038.218] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.218] lstrlenW (lpString=".xls") returned 4
	[0038.218] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.218] lstrlenW (lpString=".xlsx") returned 5
	[0038.218] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1
	[0038.218] lstrlenW (lpString=".ppt") returned 4
	[0038.218] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.218] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.218] lstrlenW (lpString=".zip") returned 4
	[0038.218] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.218] lstrlenW (lpString=".rar") returned 4
	[0038.218] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.218] lstrlenW (lpString=".bz2") returned 4
	[0038.218] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.218] lstrlenW (lpString=".7z") returned 3
	[0038.218] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.218] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.218] lstrlenW (lpString=".dbf") returned 4
	[0038.218] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.218] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.218] lstrlenW (lpString=".1cd") returned 4
	[0038.218] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.219] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.219] lstrlenW (lpString=".jpg") returned 4
	[0038.219] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.219] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0038.219] lstrlenW (lpString="Setup.xml") returned 9
	[0038.219] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0038.219] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=20577) returned 1
	[0038.219] CloseHandle (hObject=0x1a0) returned 1
	[0038.219] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0038.219] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.219] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0038.219] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.219] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.220] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0038.220] GetLastError () returned 0x0
	[0038.220] ReadFile (in: hFile=0x1a0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x5061, lpOverlapped=0x0) returned 1
	[0038.231] WriteFile (in: hFile=0x1d4, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x5070, lpOverlapped=0x0) returned 1
	[0038.232] ReadFile (in: hFile=0x1a0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0038.232] WriteFile (in: hFile=0x1d4, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0038.232] SetEndOfFile (hFile=0x1d4) returned 1
	[0038.232] CloseHandle (hObject=0x1d4) returned 1
	[0038.233] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.233] SetEndOfFile (hFile=0x1a0) returned 1
	[0038.234] CloseHandle (hObject=0x1a0) returned 1
	[0038.234] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0038.234] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0038.234] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.234] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.234] lstrlenW (lpString=".doc") returned 4
	[0038.234] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.234] lstrlenW (lpString=".docx") returned 5
	[0038.234] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0038.234] lstrlenW (lpString=".pdf") returned 4
	[0038.234] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.234] lstrlenW (lpString=".xls") returned 4
	[0038.234] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.234] lstrlenW (lpString=".xlsx") returned 5
	[0038.235] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0038.235] lstrlenW (lpString=".ppt") returned 4
	[0038.235] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.235] lstrlenW (lpString=".zip") returned 4
	[0038.235] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.235] lstrlenW (lpString=".rar") returned 4
	[0038.235] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.235] lstrlenW (lpString=".bz2") returned 4
	[0038.235] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.235] lstrlenW (lpString=".7z") returned 3
	[0038.235] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.235] lstrlenW (lpString=".dbf") returned 4
	[0038.235] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.235] lstrlenW (lpString=".1cd") returned 4
	[0038.235] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.235] lstrlenW (lpString=".jpg") returned 4
	[0038.235] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.235] lstrlenW (lpString=".doc") returned 4
	[0038.235] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.235] lstrlenW (lpString=".docx") returned 5
	[0038.235] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0038.235] lstrlenW (lpString=".pdf") returned 4
	[0038.235] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.235] lstrlenW (lpString=".xls") returned 4
	[0038.235] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.235] lstrlenW (lpString=".xlsx") returned 5
	[0038.236] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0038.236] lstrlenW (lpString=".ppt") returned 4
	[0038.236] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.236] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.236] lstrlenW (lpString=".zip") returned 4
	[0038.236] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.236] lstrlenW (lpString=".rar") returned 4
	[0038.236] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.236] lstrlenW (lpString=".bz2") returned 4
	[0038.236] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.236] lstrlenW (lpString=".7z") returned 3
	[0038.236] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.236] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.236] lstrlenW (lpString=".dbf") returned 4
	[0038.236] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.236] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.236] lstrlenW (lpString=".1cd") returned 4
	[0038.236] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.236] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.236] lstrlenW (lpString=".jpg") returned 4
	[0038.236] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.236] lstrcmpiW (lpString1=".EPS", lpString2=".beets") returned 1
	[0038.236] lstrlenW (lpString="MS.EPS") returned 6
	[0038.236] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0038.238] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=15067) returned 1
	[0038.238] CloseHandle (hObject=0x1a0) returned 1
	[0038.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps")) returned 0x20
	[0038.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.238] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0038.238] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.239] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.239] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0038.239] GetLastError () returned 0x0
	[0038.239] ReadFile (in: hFile=0x1a0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x3adb, lpOverlapped=0x0) returned 1
	[0038.248] WriteFile (in: hFile=0x1d4, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x3ae0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x3ae0, lpOverlapped=0x0) returned 1
	[0038.250] ReadFile (in: hFile=0x1a0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0038.250] WriteFile (in: hFile=0x1d4, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe0, lpOverlapped=0x0) returned 1
	[0038.250] SetEndOfFile (hFile=0x1d4) returned 1
	[0038.250] CloseHandle (hObject=0x1d4) returned 1
	[0038.251] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.251] SetEndOfFile (hFile=0x1a0) returned 1
	[0038.252] CloseHandle (hObject=0x1a0) returned 1
	[0038.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0038.252] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps")) returned 1
	[0038.252] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61
	[0038.252] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61
	[0038.252] lstrlenW (lpString=".doc") returned 4
	[0038.252] lstrcmpiW (lpString1=".doc", lpString2=".EPS") returned -1
	[0038.252] lstrlenW (lpString=".docx") returned 5
	[0038.252] lstrcmpiW (lpString1=".docx", lpString2="S.EPS") returned -1
	[0038.252] lstrlenW (lpString=".pdf") returned 4
	[0038.252] lstrcmpiW (lpString1=".pdf", lpString2=".EPS") returned 1
	[0038.253] lstrlenW (lpString=".xls") returned 4
	[0038.253] lstrcmpiW (lpString1=".xls", lpString2=".EPS") returned 1
	[0038.253] lstrlenW (lpString=".xlsx") returned 5
	[0038.253] lstrcmpiW (lpString1=".xlsx", lpString2="S.EPS") returned -1
	[0038.253] lstrlenW (lpString=".ppt") returned 4
	[0038.253] lstrcmpiW (lpString1=".ppt", lpString2=".EPS") returned 1
	[0038.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61
	[0038.253] lstrlenW (lpString=".zip") returned 4
	[0038.253] lstrcmpiW (lpString1=".zip", lpString2=".EPS") returned 1
	[0038.253] lstrlenW (lpString=".rar") returned 4
	[0038.253] lstrcmpiW (lpString1=".rar", lpString2=".EPS") returned 1
	[0038.253] lstrlenW (lpString=".bz2") returned 4
	[0038.253] lstrcmpiW (lpString1=".bz2", lpString2=".EPS") returned -1
	[0038.253] lstrlenW (lpString=".7z") returned 3
	[0038.253] lstrcmpiW (lpString1=".7z", lpString2="EPS") returned -1
	[0038.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61
	[0038.253] lstrlenW (lpString=".dbf") returned 4
	[0038.253] lstrcmpiW (lpString1=".dbf", lpString2=".EPS") returned -1
	[0038.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61
	[0038.253] lstrlenW (lpString=".1cd") returned 4
	[0038.253] lstrcmpiW (lpString1=".1cd", lpString2=".EPS") returned -1
	[0038.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61
	[0038.253] lstrlenW (lpString=".jpg") returned 4
	[0038.253] lstrcmpiW (lpString1=".jpg", lpString2=".EPS") returned 1
	[0038.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61
	[0038.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61
	[0038.253] lstrlenW (lpString=".doc") returned 4
	[0038.253] lstrcmpiW (lpString1=".doc", lpString2=".EPS") returned -1
	[0038.253] lstrlenW (lpString=".docx") returned 5
	[0038.253] lstrcmpiW (lpString1=".docx", lpString2="S.EPS") returned -1
	[0038.253] lstrlenW (lpString=".pdf") returned 4
	[0038.253] lstrcmpiW (lpString1=".pdf", lpString2=".EPS") returned 1
	[0038.253] lstrlenW (lpString=".xls") returned 4
	[0038.254] lstrcmpiW (lpString1=".xls", lpString2=".EPS") returned 1
	[0038.254] lstrlenW (lpString=".xlsx") returned 5
	[0038.254] lstrcmpiW (lpString1=".xlsx", lpString2="S.EPS") returned -1
	[0038.254] lstrlenW (lpString=".ppt") returned 4
	[0038.254] lstrcmpiW (lpString1=".ppt", lpString2=".EPS") returned 1
	[0038.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61
	[0038.254] lstrlenW (lpString=".zip") returned 4
	[0038.254] lstrcmpiW (lpString1=".zip", lpString2=".EPS") returned 1
	[0038.254] lstrlenW (lpString=".rar") returned 4
	[0038.254] lstrcmpiW (lpString1=".rar", lpString2=".EPS") returned 1
	[0038.254] lstrlenW (lpString=".bz2") returned 4
	[0038.254] lstrcmpiW (lpString1=".bz2", lpString2=".EPS") returned -1
	[0038.254] lstrlenW (lpString=".7z") returned 3
	[0038.254] lstrcmpiW (lpString1=".7z", lpString2="EPS") returned -1
	[0038.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61
	[0038.254] lstrlenW (lpString=".dbf") returned 4
	[0038.254] lstrcmpiW (lpString1=".dbf", lpString2=".EPS") returned -1
	[0038.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61
	[0038.254] lstrlenW (lpString=".1cd") returned 4
	[0038.254] lstrcmpiW (lpString1=".1cd", lpString2=".EPS") returned -1
	[0038.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS") returned 61
	[0038.254] lstrlenW (lpString=".jpg") returned 4
	[0038.254] lstrcmpiW (lpString1=".jpg", lpString2=".EPS") returned 1
	[0038.254] lstrcmpiW (lpString1=".JPG", lpString2=".beets") returned 1
	[0038.254] lstrlenW (lpString="MS.JPG") returned 6
	[0038.254] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x184
	[0038.557] GetFileSizeEx (in: hFile=0x184, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1061) returned 1
	[0038.557] CloseHandle (hObject=0x184) returned 1
	[0038.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg")) returned 0x20
	[0038.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.558] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x184
	[0038.558] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.558] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.558] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18c
	[0038.558] GetLastError () returned 0x0
	[0038.558] ReadFile (in: hFile=0x184, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x425, lpOverlapped=0x0) returned 1
	[0038.560] WriteFile (in: hFile=0x18c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x430, lpOverlapped=0x0) returned 1
	[0038.561] ReadFile (in: hFile=0x184, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0038.561] WriteFile (in: hFile=0x18c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe0, lpOverlapped=0x0) returned 1
	[0038.561] SetEndOfFile (hFile=0x18c) returned 1
	[0038.561] CloseHandle (hObject=0x18c) returned 1
	[0038.562] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.562] SetEndOfFile (hFile=0x184) returned 1
	[0038.562] CloseHandle (hObject=0x184) returned 1
	[0038.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0038.563] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg")) returned 1
	[0038.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61
	[0038.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61
	[0038.563] lstrlenW (lpString=".doc") returned 4
	[0038.563] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0038.563] lstrlenW (lpString=".docx") returned 5
	[0038.563] lstrcmpiW (lpString1=".docx", lpString2="S.JPG") returned -1
	[0038.563] lstrlenW (lpString=".pdf") returned 4
	[0038.563] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0038.563] lstrlenW (lpString=".xls") returned 4
	[0038.563] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0038.563] lstrlenW (lpString=".xlsx") returned 5
	[0038.563] lstrcmpiW (lpString1=".xlsx", lpString2="S.JPG") returned -1
	[0038.563] lstrlenW (lpString=".ppt") returned 4
	[0038.563] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0038.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61
	[0038.563] lstrlenW (lpString=".zip") returned 4
	[0038.563] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0038.563] lstrlenW (lpString=".rar") returned 4
	[0038.563] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0038.563] lstrlenW (lpString=".bz2") returned 4
	[0038.564] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0038.564] lstrlenW (lpString=".7z") returned 3
	[0038.564] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0038.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61
	[0038.564] lstrlenW (lpString=".dbf") returned 4
	[0038.564] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0038.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61
	[0038.564] lstrlenW (lpString=".1cd") returned 4
	[0038.564] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0038.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61
	[0038.564] lstrlenW (lpString=".jpg") returned 4
	[0038.564] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0038.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61
	[0038.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61
	[0038.564] lstrlenW (lpString=".doc") returned 4
	[0038.564] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0038.564] lstrlenW (lpString=".docx") returned 5
	[0038.564] lstrcmpiW (lpString1=".docx", lpString2="S.JPG") returned -1
	[0038.564] lstrlenW (lpString=".pdf") returned 4
	[0038.564] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0038.564] lstrlenW (lpString=".xls") returned 4
	[0038.564] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0038.564] lstrlenW (lpString=".xlsx") returned 5
	[0038.564] lstrcmpiW (lpString1=".xlsx", lpString2="S.JPG") returned -1
	[0038.564] lstrlenW (lpString=".ppt") returned 4
	[0038.564] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0038.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61
	[0038.564] lstrlenW (lpString=".zip") returned 4
	[0038.564] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0038.564] lstrlenW (lpString=".rar") returned 4
	[0038.564] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0038.564] lstrlenW (lpString=".bz2") returned 4
	[0038.565] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0038.565] lstrlenW (lpString=".7z") returned 3
	[0038.565] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0038.565] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61
	[0038.565] lstrlenW (lpString=".dbf") returned 4
	[0038.565] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0038.565] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61
	[0038.565] lstrlenW (lpString=".1cd") returned 4
	[0038.565] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0038.565] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG") returned 61
	[0038.565] lstrlenW (lpString=".jpg") returned 4
	[0038.565] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0038.565] lstrcmpiW (lpString1=".avi", lpString2=".beets") returned -1
	[0038.565] lstrlenW (lpString="boxed-split.avi") returned 15
	[0038.565] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0038.839] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=62976) returned 1
	[0038.839] CloseHandle (hObject=0x19c) returned 1
	[0038.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20
	[0038.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.839] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0038.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0038.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0038.839] lstrlenW (lpString=".doc") returned 4
	[0038.839] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0038.839] lstrlenW (lpString=".docx") returned 5
	[0038.839] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0038.839] lstrlenW (lpString=".pdf") returned 4
	[0038.839] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0038.839] lstrlenW (lpString=".xls") returned 4
	[0038.839] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0038.839] lstrlenW (lpString=".xlsx") returned 5
	[0038.839] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0038.839] lstrlenW (lpString=".ppt") returned 4
	[0038.839] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0038.839] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0038.839] lstrlenW (lpString=".zip") returned 4
	[0038.839] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0038.839] lstrlenW (lpString=".rar") returned 4
	[0038.840] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0038.840] lstrlenW (lpString=".bz2") returned 4
	[0038.840] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0038.840] lstrlenW (lpString=".7z") returned 3
	[0038.840] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0038.840] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0038.840] lstrlenW (lpString=".dbf") returned 4
	[0038.840] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0038.840] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0038.840] lstrlenW (lpString=".1cd") returned 4
	[0038.840] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0038.840] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0038.840] lstrlenW (lpString=".jpg") returned 4
	[0038.840] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0038.840] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0038.840] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0038.840] lstrlenW (lpString=".doc") returned 4
	[0038.840] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0038.840] lstrlenW (lpString=".docx") returned 5
	[0038.840] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0038.840] lstrlenW (lpString=".pdf") returned 4
	[0038.840] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0038.840] lstrlenW (lpString=".xls") returned 4
	[0038.840] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0038.840] lstrlenW (lpString=".xlsx") returned 5
	[0038.840] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0038.840] lstrlenW (lpString=".ppt") returned 4
	[0038.840] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0038.840] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0038.840] lstrlenW (lpString=".zip") returned 4
	[0038.840] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0038.841] lstrlenW (lpString=".rar") returned 4
	[0038.841] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0038.841] lstrlenW (lpString=".bz2") returned 4
	[0038.841] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0038.841] lstrlenW (lpString=".7z") returned 3
	[0038.841] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0038.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0038.841] lstrlenW (lpString=".dbf") returned 4
	[0038.841] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0038.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0038.841] lstrlenW (lpString=".1cd") returned 4
	[0038.841] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0038.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0038.841] lstrlenW (lpString=".jpg") returned 4
	[0038.841] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0038.841] lstrcmpiW (lpString1=".avi", lpString2=".beets") returned -1
	[0038.841] lstrlenW (lpString="correct.avi") returned 11
	[0038.841] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0038.841] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=197120) returned 1
	[0038.841] CloseHandle (hObject=0x19c) returned 1
	[0038.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20
	[0038.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.842] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0038.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi") returned 68
	[0038.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi") returned 68
	[0038.842] lstrlenW (lpString=".doc") returned 4
	[0038.842] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0038.842] lstrlenW (lpString=".docx") returned 5
	[0038.842] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0038.842] lstrlenW (lpString=".pdf") returned 4
	[0038.842] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0038.842] lstrlenW (lpString=".xls") returned 4
	[0038.842] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0038.842] lstrlenW (lpString=".xlsx") returned 5
	[0038.842] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0038.842] lstrlenW (lpString=".ppt") returned 4
	[0038.842] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0038.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi") returned 68
	[0038.842] lstrlenW (lpString=".zip") returned 4
	[0038.842] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0038.842] lstrlenW (lpString=".rar") returned 4
	[0038.842] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0038.842] lstrlenW (lpString=".bz2") returned 4
	[0038.842] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0038.842] lstrlenW (lpString=".7z") returned 3
	[0038.842] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0038.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi") returned 68
	[0038.842] lstrlenW (lpString=".dbf") returned 4
	[0038.842] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0038.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi") returned 68
	[0038.843] lstrlenW (lpString=".1cd") returned 4
	[0038.843] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0038.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi") returned 68
	[0038.843] lstrlenW (lpString=".jpg") returned 4
	[0038.843] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0038.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi") returned 68
	[0038.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi") returned 68
	[0038.843] lstrlenW (lpString=".doc") returned 4
	[0038.843] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0038.843] lstrlenW (lpString=".docx") returned 5
	[0038.843] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0038.843] lstrlenW (lpString=".pdf") returned 4
	[0038.843] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0038.843] lstrlenW (lpString=".xls") returned 4
	[0038.843] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0038.843] lstrlenW (lpString=".xlsx") returned 5
	[0038.843] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0038.843] lstrlenW (lpString=".ppt") returned 4
	[0038.843] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0038.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi") returned 68
	[0038.843] lstrlenW (lpString=".zip") returned 4
	[0038.843] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0038.843] lstrlenW (lpString=".rar") returned 4
	[0038.843] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0038.843] lstrlenW (lpString=".bz2") returned 4
	[0038.843] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0038.843] lstrlenW (lpString=".7z") returned 3
	[0038.843] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0038.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi") returned 68
	[0038.843] lstrlenW (lpString=".dbf") returned 4
	[0038.843] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0038.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi") returned 68
	[0038.844] lstrlenW (lpString=".1cd") returned 4
	[0038.844] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0038.844] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi") returned 68
	[0038.844] lstrlenW (lpString=".jpg") returned 4
	[0038.844] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0038.844] lstrcmpiW (lpString1=".avi", lpString2=".beets") returned -1
	[0038.844] lstrlenW (lpString="delete.avi") returned 10
	[0038.844] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0039.162] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=224256) returned 1
	[0039.162] CloseHandle (hObject=0x19c) returned 1
	[0039.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20
	[0039.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.162] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.162] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi") returned 67
	[0039.162] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi") returned 67
	[0039.162] lstrlenW (lpString=".doc") returned 4
	[0039.162] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.162] lstrlenW (lpString=".docx") returned 5
	[0039.162] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0039.163] lstrlenW (lpString=".pdf") returned 4
	[0039.163] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.163] lstrlenW (lpString=".xls") returned 4
	[0039.163] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.163] lstrlenW (lpString=".xlsx") returned 5
	[0039.163] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0039.163] lstrlenW (lpString=".ppt") returned 4
	[0039.163] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.163] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi") returned 67
	[0039.163] lstrlenW (lpString=".zip") returned 4
	[0039.163] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.163] lstrlenW (lpString=".rar") returned 4
	[0039.163] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.163] lstrlenW (lpString=".bz2") returned 4
	[0039.163] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.163] lstrlenW (lpString=".7z") returned 3
	[0039.163] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.163] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi") returned 67
	[0039.163] lstrlenW (lpString=".dbf") returned 4
	[0039.163] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.163] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi") returned 67
	[0039.163] lstrlenW (lpString=".1cd") returned 4
	[0039.163] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.163] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi") returned 67
	[0039.163] lstrlenW (lpString=".jpg") returned 4
	[0039.163] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.163] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi") returned 67
	[0039.163] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi") returned 67
	[0039.163] lstrlenW (lpString=".doc") returned 4
	[0039.163] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.164] lstrlenW (lpString=".docx") returned 5
	[0039.164] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0039.164] lstrlenW (lpString=".pdf") returned 4
	[0039.164] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.164] lstrlenW (lpString=".xls") returned 4
	[0039.164] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.164] lstrlenW (lpString=".xlsx") returned 5
	[0039.164] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0039.164] lstrlenW (lpString=".ppt") returned 4
	[0039.164] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.164] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi") returned 67
	[0039.164] lstrlenW (lpString=".zip") returned 4
	[0039.164] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.164] lstrlenW (lpString=".rar") returned 4
	[0039.164] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.164] lstrlenW (lpString=".bz2") returned 4
	[0039.164] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.164] lstrlenW (lpString=".7z") returned 3
	[0039.164] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.164] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi") returned 67
	[0039.164] lstrlenW (lpString=".dbf") returned 4
	[0039.164] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.164] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi") returned 67
	[0039.164] lstrlenW (lpString=".1cd") returned 4
	[0039.164] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.164] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi") returned 67
	[0039.165] lstrlenW (lpString=".jpg") returned 4
	[0039.165] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.165] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0039.165] lstrlenW (lpString="ipsita.xml") returned 10
	[0039.165] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0039.461] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=2526) returned 1
	[0039.462] CloseHandle (hObject=0x1e8) returned 1
	[0039.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20
	[0039.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.462] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml") returned 61
	[0039.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml") returned 61
	[0039.462] lstrlenW (lpString=".doc") returned 4
	[0039.462] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.462] lstrlenW (lpString=".docx") returned 5
	[0039.462] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0039.462] lstrlenW (lpString=".pdf") returned 4
	[0039.462] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.462] lstrlenW (lpString=".xls") returned 4
	[0039.462] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.462] lstrlenW (lpString=".xlsx") returned 5
	[0039.462] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0039.462] lstrlenW (lpString=".ppt") returned 4
	[0039.462] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml") returned 61
	[0039.462] lstrlenW (lpString=".zip") returned 4
	[0039.462] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.462] lstrlenW (lpString=".rar") returned 4
	[0039.462] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.462] lstrlenW (lpString=".bz2") returned 4
	[0039.462] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.463] lstrlenW (lpString=".7z") returned 3
	[0039.463] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.463] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml") returned 61
	[0039.463] lstrlenW (lpString=".dbf") returned 4
	[0039.463] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.463] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml") returned 61
	[0039.463] lstrlenW (lpString=".1cd") returned 4
	[0039.463] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.463] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml") returned 61
	[0039.463] lstrlenW (lpString=".jpg") returned 4
	[0039.463] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.463] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml") returned 61
	[0039.463] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml") returned 61
	[0039.463] lstrlenW (lpString=".doc") returned 4
	[0039.463] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.463] lstrlenW (lpString=".docx") returned 5
	[0039.463] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0039.463] lstrlenW (lpString=".pdf") returned 4
	[0039.463] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.463] lstrlenW (lpString=".xls") returned 4
	[0039.463] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.463] lstrlenW (lpString=".xlsx") returned 5
	[0039.463] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0039.463] lstrlenW (lpString=".ppt") returned 4
	[0039.463] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.463] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml") returned 61
	[0039.463] lstrlenW (lpString=".zip") returned 4
	[0039.463] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.463] lstrlenW (lpString=".rar") returned 4
	[0039.463] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.463] lstrlenW (lpString=".bz2") returned 4
	[0039.463] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.463] lstrlenW (lpString=".7z") returned 3
	[0039.464] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.464] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml") returned 61
	[0039.464] lstrlenW (lpString=".dbf") returned 4
	[0039.464] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.464] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml") returned 61
	[0039.464] lstrlenW (lpString=".1cd") returned 4
	[0039.464] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.464] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml") returned 61
	[0039.464] lstrlenW (lpString=".jpg") returned 4
	[0039.464] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.464] lstrcmpiW (lpString1=".HTM", lpString2=".beets") returned 1
	[0039.464] lstrlenW (lpString="README.HTM") returned 10
	[0039.464] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0039.472] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1941) returned 1
	[0039.472] CloseHandle (hObject=0x1f0) returned 1
	[0039.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm")) returned 0x20
	[0039.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.472] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0039.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.472] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0039.473] GetLastError () returned 0x0
	[0039.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x795, lpOverlapped=0x0) returned 1
	[0039.480] WriteFile (in: hFile=0x1f4, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x7a0, lpOverlapped=0x0) returned 1
	[0039.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0039.481] WriteFile (in: hFile=0x1f4, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0039.481] SetEndOfFile (hFile=0x1f4) returned 1
	[0039.482] CloseHandle (hObject=0x1f4) returned 1
	[0039.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.482] SetEndOfFile (hFile=0x1f0) returned 1
	[0039.483] CloseHandle (hObject=0x1f0) returned 1
	[0039.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0039.483] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm")) returned 1
	[0039.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71
	[0039.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71
	[0039.484] lstrlenW (lpString=".doc") returned 4
	[0039.484] lstrcmpiW (lpString1=".doc", lpString2=".HTM") returned -1
	[0039.484] lstrlenW (lpString=".docx") returned 5
	[0039.484] lstrcmpiW (lpString1=".docx", lpString2="E.HTM") returned -1
	[0039.484] lstrlenW (lpString=".pdf") returned 4
	[0039.484] lstrcmpiW (lpString1=".pdf", lpString2=".HTM") returned 1
	[0039.484] lstrlenW (lpString=".xls") returned 4
	[0039.484] lstrcmpiW (lpString1=".xls", lpString2=".HTM") returned 1
	[0039.484] lstrlenW (lpString=".xlsx") returned 5
	[0039.484] lstrcmpiW (lpString1=".xlsx", lpString2="E.HTM") returned -1
	[0039.484] lstrlenW (lpString=".ppt") returned 4
	[0039.484] lstrcmpiW (lpString1=".ppt", lpString2=".HTM") returned 1
	[0039.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71
	[0039.484] lstrlenW (lpString=".zip") returned 4
	[0039.484] lstrcmpiW (lpString1=".zip", lpString2=".HTM") returned 1
	[0039.484] lstrlenW (lpString=".rar") returned 4
	[0039.484] lstrcmpiW (lpString1=".rar", lpString2=".HTM") returned 1
	[0039.484] lstrlenW (lpString=".bz2") returned 4
	[0039.484] lstrcmpiW (lpString1=".bz2", lpString2=".HTM") returned -1
	[0039.484] lstrlenW (lpString=".7z") returned 3
	[0039.484] lstrcmpiW (lpString1=".7z", lpString2="HTM") returned -1
	[0039.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71
	[0039.484] lstrlenW (lpString=".dbf") returned 4
	[0039.484] lstrcmpiW (lpString1=".dbf", lpString2=".HTM") returned -1
	[0039.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71
	[0039.484] lstrlenW (lpString=".1cd") returned 4
	[0039.484] lstrcmpiW (lpString1=".1cd", lpString2=".HTM") returned -1
	[0039.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71
	[0039.484] lstrlenW (lpString=".jpg") returned 4
	[0039.484] lstrcmpiW (lpString1=".jpg", lpString2=".HTM") returned 1
	[0039.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71
	[0039.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71
	[0039.485] lstrlenW (lpString=".doc") returned 4
	[0039.485] lstrcmpiW (lpString1=".doc", lpString2=".HTM") returned -1
	[0039.485] lstrlenW (lpString=".docx") returned 5
	[0039.485] lstrcmpiW (lpString1=".docx", lpString2="E.HTM") returned -1
	[0039.485] lstrlenW (lpString=".pdf") returned 4
	[0039.485] lstrcmpiW (lpString1=".pdf", lpString2=".HTM") returned 1
	[0039.485] lstrlenW (lpString=".xls") returned 4
	[0039.485] lstrcmpiW (lpString1=".xls", lpString2=".HTM") returned 1
	[0039.485] lstrlenW (lpString=".xlsx") returned 5
	[0039.485] lstrcmpiW (lpString1=".xlsx", lpString2="E.HTM") returned -1
	[0039.485] lstrlenW (lpString=".ppt") returned 4
	[0039.485] lstrcmpiW (lpString1=".ppt", lpString2=".HTM") returned 1
	[0039.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71
	[0039.485] lstrlenW (lpString=".zip") returned 4
	[0039.485] lstrcmpiW (lpString1=".zip", lpString2=".HTM") returned 1
	[0039.485] lstrlenW (lpString=".rar") returned 4
	[0039.485] lstrcmpiW (lpString1=".rar", lpString2=".HTM") returned 1
	[0039.485] lstrlenW (lpString=".bz2") returned 4
	[0039.485] lstrcmpiW (lpString1=".bz2", lpString2=".HTM") returned -1
	[0039.485] lstrlenW (lpString=".7z") returned 3
	[0039.485] lstrcmpiW (lpString1=".7z", lpString2="HTM") returned -1
	[0039.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71
	[0039.485] lstrlenW (lpString=".dbf") returned 4
	[0039.485] lstrcmpiW (lpString1=".dbf", lpString2=".HTM") returned -1
	[0039.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71
	[0039.485] lstrlenW (lpString=".1cd") returned 4
	[0039.485] lstrcmpiW (lpString1=".1cd", lpString2=".HTM") returned -1
	[0039.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM") returned 71
	[0039.485] lstrlenW (lpString=".jpg") returned 4
	[0039.485] lstrcmpiW (lpString1=".jpg", lpString2=".HTM") returned 1
	[0039.486] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0039.486] lstrlenW (lpString="SETUP.XML") returned 9
	[0039.486] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0039.488] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=2624) returned 1
	[0039.488] CloseHandle (hObject=0x1e8) returned 1
	[0039.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml")) returned 0x20
	[0039.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.496] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0039.496] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.497] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.497] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0039.505] GetLastError () returned 0x0
	[0039.505] ReadFile (in: hFile=0x1e8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xa40, lpOverlapped=0x0) returned 1
	[0039.515] WriteFile (in: hFile=0x1f0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xa50, lpOverlapped=0x0) returned 1
	[0039.516] ReadFile (in: hFile=0x1e8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0039.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0039.516] SetEndOfFile (hFile=0x1f0) returned 1
	[0039.516] CloseHandle (hObject=0x1f0) returned 1
	[0039.517] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.517] SetEndOfFile (hFile=0x1e8) returned 1
	[0039.518] CloseHandle (hObject=0x1e8) returned 1
	[0039.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0039.518] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml")) returned 1
	[0039.518] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102
	[0039.518] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102
	[0039.518] lstrlenW (lpString=".doc") returned 4
	[0039.518] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0039.518] lstrlenW (lpString=".docx") returned 5
	[0039.519] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0039.519] lstrlenW (lpString=".pdf") returned 4
	[0039.519] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0039.519] lstrlenW (lpString=".xls") returned 4
	[0039.519] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0039.519] lstrlenW (lpString=".xlsx") returned 5
	[0039.519] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0039.519] lstrlenW (lpString=".ppt") returned 4
	[0039.519] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0039.519] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102
	[0039.519] lstrlenW (lpString=".zip") returned 4
	[0039.519] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0039.519] lstrlenW (lpString=".rar") returned 4
	[0039.519] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0039.519] lstrlenW (lpString=".bz2") returned 4
	[0039.519] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0039.519] lstrlenW (lpString=".7z") returned 3
	[0039.519] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0039.519] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102
	[0039.519] lstrlenW (lpString=".dbf") returned 4
	[0039.519] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0039.519] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102
	[0039.519] lstrlenW (lpString=".1cd") returned 4
	[0039.519] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0039.519] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102
	[0039.519] lstrlenW (lpString=".jpg") returned 4
	[0039.519] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0039.519] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102
	[0039.519] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102
	[0039.519] lstrlenW (lpString=".doc") returned 4
	[0039.519] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0039.519] lstrlenW (lpString=".docx") returned 5
	[0039.520] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0039.520] lstrlenW (lpString=".pdf") returned 4
	[0039.520] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0039.520] lstrlenW (lpString=".xls") returned 4
	[0039.520] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0039.520] lstrlenW (lpString=".xlsx") returned 5
	[0039.520] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0039.520] lstrlenW (lpString=".ppt") returned 4
	[0039.520] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0039.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102
	[0039.520] lstrlenW (lpString=".zip") returned 4
	[0039.520] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0039.520] lstrlenW (lpString=".rar") returned 4
	[0039.520] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0039.520] lstrlenW (lpString=".bz2") returned 4
	[0039.520] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0039.520] lstrlenW (lpString=".7z") returned 3
	[0039.520] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0039.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102
	[0039.520] lstrlenW (lpString=".dbf") returned 4
	[0039.520] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0039.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102
	[0039.520] lstrlenW (lpString=".1cd") returned 4
	[0039.520] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0039.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML") returned 102
	[0039.520] lstrlenW (lpString=".jpg") returned 4
	[0039.520] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0039.520] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0039.520] lstrlenW (lpString="SETUP.XML") returned 9
	[0039.521] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0040.796] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1452) returned 1
	[0040.796] CloseHandle (hObject=0x200) returned 1
	[0040.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml")) returned 0x20
	[0040.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.797] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0040.797] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.797] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.797] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0040.797] GetLastError () returned 0x0
	[0040.797] ReadFile (in: hFile=0x200, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x5ac, lpOverlapped=0x0) returned 1
	[0040.987] WriteFile (in: hFile=0x204, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x5b0, lpOverlapped=0x0) returned 1
	[0040.988] ReadFile (in: hFile=0x200, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.988] WriteFile (in: hFile=0x204, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0040.988] SetEndOfFile (hFile=0x204) returned 1
	[0040.988] CloseHandle (hObject=0x204) returned 1
	[0040.989] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.989] SetEndOfFile (hFile=0x200) returned 1
	[0040.990] CloseHandle (hObject=0x200) returned 1
	[0040.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.990] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml")) returned 1
	[0040.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102
	[0040.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102
	[0040.990] lstrlenW (lpString=".doc") returned 4
	[0040.990] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.990] lstrlenW (lpString=".docx") returned 5
	[0040.990] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0040.990] lstrlenW (lpString=".pdf") returned 4
	[0040.990] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.990] lstrlenW (lpString=".xls") returned 4
	[0040.990] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.990] lstrlenW (lpString=".xlsx") returned 5
	[0040.991] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0040.991] lstrlenW (lpString=".ppt") returned 4
	[0040.991] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102
	[0040.991] lstrlenW (lpString=".zip") returned 4
	[0040.991] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.991] lstrlenW (lpString=".rar") returned 4
	[0040.991] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.991] lstrlenW (lpString=".bz2") returned 4
	[0040.991] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.991] lstrlenW (lpString=".7z") returned 3
	[0040.991] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102
	[0040.991] lstrlenW (lpString=".dbf") returned 4
	[0040.991] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102
	[0040.991] lstrlenW (lpString=".1cd") returned 4
	[0040.991] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102
	[0040.991] lstrlenW (lpString=".jpg") returned 4
	[0040.991] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102
	[0040.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102
	[0040.991] lstrlenW (lpString=".doc") returned 4
	[0040.991] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.991] lstrlenW (lpString=".docx") returned 5
	[0040.991] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0040.991] lstrlenW (lpString=".pdf") returned 4
	[0040.991] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.991] lstrlenW (lpString=".xls") returned 4
	[0040.991] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.991] lstrlenW (lpString=".xlsx") returned 5
	[0040.992] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0040.992] lstrlenW (lpString=".ppt") returned 4
	[0040.992] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102
	[0040.992] lstrlenW (lpString=".zip") returned 4
	[0040.992] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.992] lstrlenW (lpString=".rar") returned 4
	[0040.992] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.992] lstrlenW (lpString=".bz2") returned 4
	[0040.992] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.992] lstrlenW (lpString=".7z") returned 3
	[0040.992] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102
	[0040.992] lstrlenW (lpString=".dbf") returned 4
	[0040.992] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102
	[0040.992] lstrlenW (lpString=".1cd") returned 4
	[0040.992] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML") returned 102
	[0040.992] lstrlenW (lpString=".jpg") returned 4
	[0040.992] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.992] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0040.992] lstrlenW (lpString="OneNoteMUI.XML") returned 14
	[0040.992] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0040.993] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1606) returned 1
	[0040.993] CloseHandle (hObject=0x200) returned 1
	[0040.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml")) returned 0x20
	[0040.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.993] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0040.993] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.993] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.993] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0041.011] GetLastError () returned 0x0
	[0041.011] ReadFile (in: hFile=0x200, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x646, lpOverlapped=0x0) returned 1
	[0041.012] WriteFile (in: hFile=0x19c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x650, lpOverlapped=0x0) returned 1
	[0041.013] ReadFile (in: hFile=0x200, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.013] WriteFile (in: hFile=0x19c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xf0, lpOverlapped=0x0) returned 1
	[0041.013] SetEndOfFile (hFile=0x19c) returned 1
	[0041.013] CloseHandle (hObject=0x19c) returned 1
	[0041.014] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.014] SetEndOfFile (hFile=0x200) returned 1
	[0041.015] CloseHandle (hObject=0x200) returned 1
	[0041.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.015] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml")) returned 1
	[0041.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0041.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0041.015] lstrlenW (lpString=".doc") returned 4
	[0041.015] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.015] lstrlenW (lpString=".docx") returned 5
	[0041.015] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0041.016] lstrlenW (lpString=".pdf") returned 4
	[0041.016] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.016] lstrlenW (lpString=".xls") returned 4
	[0041.016] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.016] lstrlenW (lpString=".xlsx") returned 5
	[0041.016] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0041.016] lstrlenW (lpString=".ppt") returned 4
	[0041.016] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0041.016] lstrlenW (lpString=".zip") returned 4
	[0041.016] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.016] lstrlenW (lpString=".rar") returned 4
	[0041.016] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.016] lstrlenW (lpString=".bz2") returned 4
	[0041.016] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.016] lstrlenW (lpString=".7z") returned 3
	[0041.016] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0041.016] lstrlenW (lpString=".dbf") returned 4
	[0041.016] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0041.016] lstrlenW (lpString=".1cd") returned 4
	[0041.016] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0041.016] lstrlenW (lpString=".jpg") returned 4
	[0041.016] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0041.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0041.016] lstrlenW (lpString=".doc") returned 4
	[0041.016] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.016] lstrlenW (lpString=".docx") returned 5
	[0041.016] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0041.017] lstrlenW (lpString=".pdf") returned 4
	[0041.017] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.017] lstrlenW (lpString=".xls") returned 4
	[0041.017] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.017] lstrlenW (lpString=".xlsx") returned 5
	[0041.017] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0041.017] lstrlenW (lpString=".ppt") returned 4
	[0041.017] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0041.017] lstrlenW (lpString=".zip") returned 4
	[0041.017] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.017] lstrlenW (lpString=".rar") returned 4
	[0041.017] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.017] lstrlenW (lpString=".bz2") returned 4
	[0041.017] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.017] lstrlenW (lpString=".7z") returned 3
	[0041.017] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0041.017] lstrlenW (lpString=".dbf") returned 4
	[0041.017] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0041.017] lstrlenW (lpString=".1cd") returned 4
	[0041.017] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML") returned 108
	[0041.017] lstrlenW (lpString=".jpg") returned 4
	[0041.017] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.017] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.017] lstrlenW (lpString="OutlookMUI.XML") returned 14
	[0041.018] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.018] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=3186) returned 1
	[0041.018] CloseHandle (hObject=0x200) returned 1
	[0041.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml")) returned 0x20
	[0041.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.018] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.018] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.018] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.018] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0041.020] GetLastError () returned 0x0
	[0041.020] ReadFile (in: hFile=0x200, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xc72, lpOverlapped=0x0) returned 1
	[0041.021] WriteFile (in: hFile=0x19c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xc80, lpOverlapped=0x0) returned 1
	[0041.022] ReadFile (in: hFile=0x200, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.022] WriteFile (in: hFile=0x19c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xf0, lpOverlapped=0x0) returned 1
	[0041.022] SetEndOfFile (hFile=0x19c) returned 1
	[0041.022] CloseHandle (hObject=0x19c) returned 1
	[0041.023] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.023] SetEndOfFile (hFile=0x200) returned 1
	[0041.024] CloseHandle (hObject=0x200) returned 1
	[0041.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.024] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml")) returned 1
	[0041.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0041.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0041.024] lstrlenW (lpString=".doc") returned 4
	[0041.024] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.024] lstrlenW (lpString=".docx") returned 5
	[0041.025] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0041.025] lstrlenW (lpString=".pdf") returned 4
	[0041.025] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.025] lstrlenW (lpString=".xls") returned 4
	[0041.025] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.025] lstrlenW (lpString=".xlsx") returned 5
	[0041.025] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0041.025] lstrlenW (lpString=".ppt") returned 4
	[0041.025] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0041.025] lstrlenW (lpString=".zip") returned 4
	[0041.025] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.025] lstrlenW (lpString=".rar") returned 4
	[0041.025] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.025] lstrlenW (lpString=".bz2") returned 4
	[0041.025] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.025] lstrlenW (lpString=".7z") returned 3
	[0041.025] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0041.025] lstrlenW (lpString=".dbf") returned 4
	[0041.025] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0041.025] lstrlenW (lpString=".1cd") returned 4
	[0041.025] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0041.025] lstrlenW (lpString=".jpg") returned 4
	[0041.025] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0041.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0041.025] lstrlenW (lpString=".doc") returned 4
	[0041.025] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.025] lstrlenW (lpString=".docx") returned 5
	[0041.025] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0041.026] lstrlenW (lpString=".pdf") returned 4
	[0041.026] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.026] lstrlenW (lpString=".xls") returned 4
	[0041.026] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.026] lstrlenW (lpString=".xlsx") returned 5
	[0041.026] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0041.026] lstrlenW (lpString=".ppt") returned 4
	[0041.026] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0041.026] lstrlenW (lpString=".zip") returned 4
	[0041.026] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.026] lstrlenW (lpString=".rar") returned 4
	[0041.026] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.026] lstrlenW (lpString=".bz2") returned 4
	[0041.026] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.026] lstrlenW (lpString=".7z") returned 3
	[0041.026] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0041.026] lstrlenW (lpString=".dbf") returned 4
	[0041.026] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0041.026] lstrlenW (lpString=".1cd") returned 4
	[0041.026] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML") returned 108
	[0041.026] lstrlenW (lpString=".jpg") returned 4
	[0041.026] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.026] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.026] lstrlenW (lpString="SETUP.XML") returned 9
	[0041.026] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.027] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=4207) returned 1
	[0041.027] CloseHandle (hObject=0x200) returned 1
	[0041.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml")) returned 0x20
	[0041.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.028] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.028] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.028] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.028] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0041.028] GetLastError () returned 0x0
	[0041.028] ReadFile (in: hFile=0x200, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x106f, lpOverlapped=0x0) returned 1
	[0041.030] WriteFile (in: hFile=0x19c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x1070, lpOverlapped=0x0) returned 1
	[0041.031] ReadFile (in: hFile=0x200, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.031] WriteFile (in: hFile=0x19c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0041.031] SetEndOfFile (hFile=0x19c) returned 1
	[0041.031] CloseHandle (hObject=0x19c) returned 1
	[0041.032] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.032] SetEndOfFile (hFile=0x200) returned 1
	[0041.032] CloseHandle (hObject=0x200) returned 1
	[0041.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.033] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml")) returned 1
	[0041.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103
	[0041.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103
	[0041.033] lstrlenW (lpString=".doc") returned 4
	[0041.033] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.033] lstrlenW (lpString=".docx") returned 5
	[0041.033] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0041.033] lstrlenW (lpString=".pdf") returned 4
	[0041.033] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.033] lstrlenW (lpString=".xls") returned 4
	[0041.033] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.033] lstrlenW (lpString=".xlsx") returned 5
	[0041.033] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0041.033] lstrlenW (lpString=".ppt") returned 4
	[0041.033] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103
	[0041.033] lstrlenW (lpString=".zip") returned 4
	[0041.033] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.033] lstrlenW (lpString=".rar") returned 4
	[0041.033] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.034] lstrlenW (lpString=".bz2") returned 4
	[0041.034] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.034] lstrlenW (lpString=".7z") returned 3
	[0041.034] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103
	[0041.034] lstrlenW (lpString=".dbf") returned 4
	[0041.034] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103
	[0041.034] lstrlenW (lpString=".1cd") returned 4
	[0041.034] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103
	[0041.034] lstrlenW (lpString=".jpg") returned 4
	[0041.034] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103
	[0041.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103
	[0041.034] lstrlenW (lpString=".doc") returned 4
	[0041.034] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.034] lstrlenW (lpString=".docx") returned 5
	[0041.034] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0041.034] lstrlenW (lpString=".pdf") returned 4
	[0041.034] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.034] lstrlenW (lpString=".xls") returned 4
	[0041.034] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.034] lstrlenW (lpString=".xlsx") returned 5
	[0041.034] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0041.034] lstrlenW (lpString=".ppt") returned 4
	[0041.034] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103
	[0041.034] lstrlenW (lpString=".zip") returned 4
	[0041.034] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.034] lstrlenW (lpString=".rar") returned 4
	[0041.034] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.034] lstrlenW (lpString=".bz2") returned 4
	[0041.035] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.035] lstrlenW (lpString=".7z") returned 3
	[0041.035] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103
	[0041.035] lstrlenW (lpString=".dbf") returned 4
	[0041.035] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103
	[0041.035] lstrlenW (lpString=".1cd") returned 4
	[0041.035] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML") returned 103
	[0041.035] lstrlenW (lpString=".jpg") returned 4
	[0041.035] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.035] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.035] lstrlenW (lpString="PowerPointMUI.XML") returned 17
	[0041.035] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.035] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1450) returned 1
	[0041.035] CloseHandle (hObject=0x200) returned 1
	[0041.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml")) returned 0x20
	[0041.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.260] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0041.260] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.260] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.260] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0042.043] GetLastError () returned 0x0
	[0042.043] ReadFile (in: hFile=0x1d4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x5aa, lpOverlapped=0x0) returned 1
	[0042.045] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x5b0, lpOverlapped=0x0) returned 1
	[0042.449] ReadFile (in: hFile=0x1d4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0042.449] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xf6, lpOverlapped=0x0) returned 1
	[0042.449] SetEndOfFile (hFile=0x1e0) returned 1
	[0042.763] CloseHandle (hObject=0x1e0) returned 1
	[0042.764] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.764] SetEndOfFile (hFile=0x1d4) returned 1
	[0042.765] CloseHandle (hObject=0x1d4) returned 1
	[0042.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0042.765] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml")) returned 1
	[0042.765] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0042.765] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0042.765] lstrlenW (lpString=".doc") returned 4
	[0042.765] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0042.765] lstrlenW (lpString=".docx") returned 5
	[0042.765] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0042.765] lstrlenW (lpString=".pdf") returned 4
	[0042.765] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0042.765] lstrlenW (lpString=".xls") returned 4
	[0042.765] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0042.765] lstrlenW (lpString=".xlsx") returned 5
	[0042.765] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0042.766] lstrlenW (lpString=".ppt") returned 4
	[0042.766] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0042.766] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0042.766] lstrlenW (lpString=".zip") returned 4
	[0042.766] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0042.766] lstrlenW (lpString=".rar") returned 4
	[0042.766] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0042.766] lstrlenW (lpString=".bz2") returned 4
	[0042.766] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0042.766] lstrlenW (lpString=".7z") returned 3
	[0042.766] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0042.766] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0042.766] lstrlenW (lpString=".dbf") returned 4
	[0042.766] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0042.766] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0042.766] lstrlenW (lpString=".1cd") returned 4
	[0042.766] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0042.766] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0042.766] lstrlenW (lpString=".jpg") returned 4
	[0042.766] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0042.766] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0042.766] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0042.766] lstrlenW (lpString=".doc") returned 4
	[0042.766] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0042.766] lstrlenW (lpString=".docx") returned 5
	[0042.766] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0042.766] lstrlenW (lpString=".pdf") returned 4
	[0042.766] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0042.766] lstrlenW (lpString=".xls") returned 4
	[0042.766] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0042.766] lstrlenW (lpString=".xlsx") returned 5
	[0042.766] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0042.767] lstrlenW (lpString=".ppt") returned 4
	[0042.767] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0042.767] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0042.767] lstrlenW (lpString=".zip") returned 4
	[0042.767] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0042.767] lstrlenW (lpString=".rar") returned 4
	[0042.767] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0042.767] lstrlenW (lpString=".bz2") returned 4
	[0042.767] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0042.767] lstrlenW (lpString=".7z") returned 3
	[0042.767] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0042.767] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0042.767] lstrlenW (lpString=".dbf") returned 4
	[0042.767] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0042.767] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0042.767] lstrlenW (lpString=".1cd") returned 4
	[0042.767] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0042.767] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML") returned 114
	[0042.767] lstrlenW (lpString=".jpg") returned 4
	[0042.767] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0042.767] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0042.767] lstrlenW (lpString="SETUP.XML") returned 9
	[0042.767] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0042.897] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=20577) returned 1
	[0042.897] CloseHandle (hObject=0x1e8) returned 1
	[0042.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml")) returned 0x20
	[0042.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0042.897] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0042.898] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.898] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.898] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0042.898] GetLastError () returned 0x0
	[0042.898] ReadFile (in: hFile=0x1e8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x5061, lpOverlapped=0x0) returned 1
	[0043.470] WriteFile (in: hFile=0x1d4, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x5070, lpOverlapped=0x0) returned 1
	[0043.472] ReadFile (in: hFile=0x1e8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0043.472] WriteFile (in: hFile=0x1d4, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0043.472] SetEndOfFile (hFile=0x1d4) returned 1
	[0043.472] CloseHandle (hObject=0x1d4) returned 1
	[0043.473] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.473] SetEndOfFile (hFile=0x1e8) returned 1
	[0043.474] CloseHandle (hObject=0x1e8) returned 1
	[0043.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0043.474] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml")) returned 1
	[0043.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0043.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0043.476] lstrlenW (lpString=".doc") returned 4
	[0043.476] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0043.476] lstrlenW (lpString=".docx") returned 5
	[0043.477] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0043.477] lstrlenW (lpString=".pdf") returned 4
	[0043.477] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0043.477] lstrlenW (lpString=".xls") returned 4
	[0043.477] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0043.477] lstrlenW (lpString=".xlsx") returned 5
	[0043.477] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0043.477] lstrlenW (lpString=".ppt") returned 4
	[0043.477] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0043.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0043.477] lstrlenW (lpString=".zip") returned 4
	[0043.477] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0043.477] lstrlenW (lpString=".rar") returned 4
	[0043.477] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0043.477] lstrlenW (lpString=".bz2") returned 4
	[0043.477] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0043.477] lstrlenW (lpString=".7z") returned 3
	[0043.477] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0043.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0043.477] lstrlenW (lpString=".dbf") returned 4
	[0043.477] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0043.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0043.477] lstrlenW (lpString=".1cd") returned 4
	[0043.477] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0043.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0043.477] lstrlenW (lpString=".jpg") returned 4
	[0043.477] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0043.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0043.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0043.477] lstrlenW (lpString=".doc") returned 4
	[0043.477] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0043.477] lstrlenW (lpString=".docx") returned 5
	[0043.478] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0043.478] lstrlenW (lpString=".pdf") returned 4
	[0043.478] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0043.478] lstrlenW (lpString=".xls") returned 4
	[0043.478] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0043.478] lstrlenW (lpString=".xlsx") returned 5
	[0043.478] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0043.478] lstrlenW (lpString=".ppt") returned 4
	[0043.478] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0043.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0043.478] lstrlenW (lpString=".zip") returned 4
	[0043.478] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0043.478] lstrlenW (lpString=".rar") returned 4
	[0043.478] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0043.478] lstrlenW (lpString=".bz2") returned 4
	[0043.478] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0043.478] lstrlenW (lpString=".7z") returned 3
	[0043.478] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0043.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0043.478] lstrlenW (lpString=".dbf") returned 4
	[0043.478] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0043.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0043.478] lstrlenW (lpString=".1cd") returned 4
	[0043.478] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0043.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML") returned 96
	[0043.478] lstrlenW (lpString=".jpg") returned 4
	[0043.478] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0043.478] lstrcmpiW (lpString1=".HTM", lpString2=".beets") returned 1
	[0043.478] lstrlenW (lpString="MCABOUT.HTM") returned 11
	[0043.479] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0043.480] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=11463) returned 1
	[0043.480] CloseHandle (hObject=0x1e8) returned 1
	[0043.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm")) returned 0x20
	[0043.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0043.480] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0043.480] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.480] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.480] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0043.603] GetLastError () returned 0x0
	[0043.603] ReadFile (in: hFile=0x1e8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x2cc7, lpOverlapped=0x0) returned 1
	[0043.605] WriteFile (in: hFile=0x1d4, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x2cd0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x2cd0, lpOverlapped=0x0) returned 1
	[0043.606] ReadFile (in: hFile=0x1e8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0043.606] WriteFile (in: hFile=0x1d4, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0043.606] SetEndOfFile (hFile=0x1d4) returned 1
	[0043.606] CloseHandle (hObject=0x1d4) returned 1
	[0043.607] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.607] SetEndOfFile (hFile=0x1e8) returned 1
	[0043.608] CloseHandle (hObject=0x1e8) returned 1
	[0043.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0043.608] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm")) returned 1
	[0043.608] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0043.608] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0043.608] lstrlenW (lpString=".doc") returned 4
	[0043.608] lstrcmpiW (lpString1=".doc", lpString2=".HTM") returned -1
	[0043.608] lstrlenW (lpString=".docx") returned 5
	[0043.608] lstrcmpiW (lpString1=".docx", lpString2="T.HTM") returned -1
	[0043.608] lstrlenW (lpString=".pdf") returned 4
	[0043.609] lstrcmpiW (lpString1=".pdf", lpString2=".HTM") returned 1
	[0043.609] lstrlenW (lpString=".xls") returned 4
	[0043.609] lstrcmpiW (lpString1=".xls", lpString2=".HTM") returned 1
	[0043.609] lstrlenW (lpString=".xlsx") returned 5
	[0043.609] lstrcmpiW (lpString1=".xlsx", lpString2="T.HTM") returned -1
	[0043.609] lstrlenW (lpString=".ppt") returned 4
	[0043.609] lstrcmpiW (lpString1=".ppt", lpString2=".HTM") returned 1
	[0043.609] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0043.609] lstrlenW (lpString=".zip") returned 4
	[0043.609] lstrcmpiW (lpString1=".zip", lpString2=".HTM") returned 1
	[0043.609] lstrlenW (lpString=".rar") returned 4
	[0043.609] lstrcmpiW (lpString1=".rar", lpString2=".HTM") returned 1
	[0043.609] lstrlenW (lpString=".bz2") returned 4
	[0043.609] lstrcmpiW (lpString1=".bz2", lpString2=".HTM") returned -1
	[0043.609] lstrlenW (lpString=".7z") returned 3
	[0043.609] lstrcmpiW (lpString1=".7z", lpString2="HTM") returned -1
	[0043.609] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0043.609] lstrlenW (lpString=".dbf") returned 4
	[0043.609] lstrcmpiW (lpString1=".dbf", lpString2=".HTM") returned -1
	[0043.609] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0043.609] lstrlenW (lpString=".1cd") returned 4
	[0043.609] lstrcmpiW (lpString1=".1cd", lpString2=".HTM") returned -1
	[0043.609] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0043.609] lstrlenW (lpString=".jpg") returned 4
	[0043.609] lstrcmpiW (lpString1=".jpg", lpString2=".HTM") returned 1
	[0043.609] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0043.609] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0043.609] lstrlenW (lpString=".doc") returned 4
	[0043.609] lstrcmpiW (lpString1=".doc", lpString2=".HTM") returned -1
	[0043.609] lstrlenW (lpString=".docx") returned 5
	[0043.610] lstrcmpiW (lpString1=".docx", lpString2="T.HTM") returned -1
	[0043.610] lstrlenW (lpString=".pdf") returned 4
	[0043.610] lstrcmpiW (lpString1=".pdf", lpString2=".HTM") returned 1
	[0043.610] lstrlenW (lpString=".xls") returned 4
	[0043.610] lstrcmpiW (lpString1=".xls", lpString2=".HTM") returned 1
	[0043.610] lstrlenW (lpString=".xlsx") returned 5
	[0043.610] lstrcmpiW (lpString1=".xlsx", lpString2="T.HTM") returned -1
	[0043.610] lstrlenW (lpString=".ppt") returned 4
	[0043.610] lstrcmpiW (lpString1=".ppt", lpString2=".HTM") returned 1
	[0043.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0043.610] lstrlenW (lpString=".zip") returned 4
	[0043.610] lstrcmpiW (lpString1=".zip", lpString2=".HTM") returned 1
	[0043.610] lstrlenW (lpString=".rar") returned 4
	[0043.610] lstrcmpiW (lpString1=".rar", lpString2=".HTM") returned 1
	[0043.610] lstrlenW (lpString=".bz2") returned 4
	[0043.610] lstrcmpiW (lpString1=".bz2", lpString2=".HTM") returned -1
	[0043.610] lstrlenW (lpString=".7z") returned 3
	[0043.610] lstrcmpiW (lpString1=".7z", lpString2="HTM") returned -1
	[0043.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0043.610] lstrlenW (lpString=".dbf") returned 4
	[0043.610] lstrcmpiW (lpString1=".dbf", lpString2=".HTM") returned -1
	[0043.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0043.610] lstrlenW (lpString=".1cd") returned 4
	[0043.610] lstrcmpiW (lpString1=".1cd", lpString2=".HTM") returned -1
	[0043.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM") returned 73
	[0043.610] lstrlenW (lpString=".jpg") returned 4
	[0043.610] lstrcmpiW (lpString1=".jpg", lpString2=".HTM") returned 1
	[0043.611] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0043.611] lstrlenW (lpString="PHONE.XML") returned 9
	[0043.611] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0044.850] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1844) returned 1
	[0044.851] CloseHandle (hObject=0x21c) returned 1
	[0044.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml")) returned 0x20
	[0044.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0044.875] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0044.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.875] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0046.184] GetLastError () returned 0x0
	[0046.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x734, lpOverlapped=0x0) returned 1
	[0046.317] WriteFile (in: hFile=0x200, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x740, lpOverlapped=0x0) returned 1
	[0046.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0046.318] WriteFile (in: hFile=0x200, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0046.318] SetEndOfFile (hFile=0x200) returned 1
	[0046.318] CloseHandle (hObject=0x200) returned 1
	[0046.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.319] SetEndOfFile (hFile=0x1ec) returned 1
	[0046.320] CloseHandle (hObject=0x1ec) returned 1
	[0046.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0046.320] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml")) returned 1
	[0046.320] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0046.320] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0046.321] lstrlenW (lpString=".doc") returned 4
	[0046.321] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0046.321] lstrlenW (lpString=".docx") returned 5
	[0046.321] lstrcmpiW (lpString1=".docx", lpString2="E.XML") returned -1
	[0046.321] lstrlenW (lpString=".pdf") returned 4
	[0046.321] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0046.321] lstrlenW (lpString=".xls") returned 4
	[0046.321] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0046.321] lstrlenW (lpString=".xlsx") returned 5
	[0046.321] lstrcmpiW (lpString1=".xlsx", lpString2="E.XML") returned -1
	[0046.321] lstrlenW (lpString=".ppt") returned 4
	[0046.321] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0046.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0046.321] lstrlenW (lpString=".zip") returned 4
	[0046.321] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0046.321] lstrlenW (lpString=".rar") returned 4
	[0046.321] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0046.321] lstrlenW (lpString=".bz2") returned 4
	[0046.321] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0046.321] lstrlenW (lpString=".7z") returned 3
	[0046.321] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0046.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0046.321] lstrlenW (lpString=".dbf") returned 4
	[0046.321] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0046.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0046.321] lstrlenW (lpString=".1cd") returned 4
	[0046.321] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0046.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0046.321] lstrlenW (lpString=".jpg") returned 4
	[0046.321] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0046.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0046.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0046.322] lstrlenW (lpString=".doc") returned 4
	[0046.322] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0046.322] lstrlenW (lpString=".docx") returned 5
	[0046.322] lstrcmpiW (lpString1=".docx", lpString2="E.XML") returned -1
	[0046.322] lstrlenW (lpString=".pdf") returned 4
	[0046.322] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0046.322] lstrlenW (lpString=".xls") returned 4
	[0046.322] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0046.322] lstrlenW (lpString=".xlsx") returned 5
	[0046.322] lstrcmpiW (lpString1=".xlsx", lpString2="E.XML") returned -1
	[0046.322] lstrlenW (lpString=".ppt") returned 4
	[0046.322] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0046.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0046.322] lstrlenW (lpString=".zip") returned 4
	[0046.322] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0046.322] lstrlenW (lpString=".rar") returned 4
	[0046.322] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0046.322] lstrlenW (lpString=".bz2") returned 4
	[0046.322] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0046.322] lstrlenW (lpString=".7z") returned 3
	[0046.322] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0046.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0046.322] lstrlenW (lpString=".dbf") returned 4
	[0046.322] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0046.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0046.322] lstrlenW (lpString=".1cd") returned 4
	[0046.322] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0046.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML") returned 77
	[0046.322] lstrlenW (lpString=".jpg") returned 4
	[0046.322] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0046.323] lstrcmpiW (lpString1=".emf", lpString2=".beets") returned 1
	[0046.323] lstrlenW (lpString="Graph.emf") returned 9
	[0046.323] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.403] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=116724) returned 1
	[0046.403] CloseHandle (hObject=0x1ec) returned 1
	[0046.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf")) returned 0x20
	[0046.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.403] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67
	[0046.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67
	[0046.403] lstrlenW (lpString=".doc") returned 4
	[0046.403] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1
	[0046.403] lstrlenW (lpString=".docx") returned 5
	[0046.403] lstrcmpiW (lpString1=".docx", lpString2="h.emf") returned -1
	[0046.403] lstrlenW (lpString=".pdf") returned 4
	[0046.403] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1
	[0046.403] lstrlenW (lpString=".xls") returned 4
	[0046.403] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1
	[0046.403] lstrlenW (lpString=".xlsx") returned 5
	[0046.403] lstrcmpiW (lpString1=".xlsx", lpString2="h.emf") returned -1
	[0046.403] lstrlenW (lpString=".ppt") returned 4
	[0046.403] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1
	[0046.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67
	[0046.404] lstrlenW (lpString=".zip") returned 4
	[0046.404] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1
	[0046.404] lstrlenW (lpString=".rar") returned 4
	[0046.404] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1
	[0046.404] lstrlenW (lpString=".bz2") returned 4
	[0046.404] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1
	[0046.404] lstrlenW (lpString=".7z") returned 3
	[0046.404] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1
	[0046.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67
	[0046.404] lstrlenW (lpString=".dbf") returned 4
	[0046.404] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1
	[0046.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67
	[0046.404] lstrlenW (lpString=".1cd") returned 4
	[0046.404] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1
	[0046.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67
	[0046.404] lstrlenW (lpString=".jpg") returned 4
	[0046.404] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1
	[0046.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67
	[0046.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67
	[0046.404] lstrlenW (lpString=".doc") returned 4
	[0046.404] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1
	[0046.404] lstrlenW (lpString=".docx") returned 5
	[0046.404] lstrcmpiW (lpString1=".docx", lpString2="h.emf") returned -1
	[0046.404] lstrlenW (lpString=".pdf") returned 4
	[0046.404] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1
	[0046.404] lstrlenW (lpString=".xls") returned 4
	[0046.404] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1
	[0046.404] lstrlenW (lpString=".xlsx") returned 5
	[0046.404] lstrcmpiW (lpString1=".xlsx", lpString2="h.emf") returned -1
	[0046.404] lstrlenW (lpString=".ppt") returned 4
	[0046.404] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1
	[0046.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67
	[0046.405] lstrlenW (lpString=".zip") returned 4
	[0046.405] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1
	[0046.405] lstrlenW (lpString=".rar") returned 4
	[0046.405] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1
	[0046.405] lstrlenW (lpString=".bz2") returned 4
	[0046.405] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1
	[0046.405] lstrlenW (lpString=".7z") returned 3
	[0046.405] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1
	[0046.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67
	[0046.405] lstrlenW (lpString=".dbf") returned 4
	[0046.405] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1
	[0046.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67
	[0046.405] lstrlenW (lpString=".1cd") returned 4
	[0046.405] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1
	[0046.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf") returned 67
	[0046.405] lstrlenW (lpString=".jpg") returned 4
	[0046.405] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1
	[0046.405] lstrcmpiW (lpString1=".jpg", lpString2=".beets") returned 1
	[0046.405] lstrlenW (lpString="GreenBubbles.jpg") returned 16
	[0046.405] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.405] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=6406) returned 1
	[0046.406] CloseHandle (hObject=0x1ec) returned 1
	[0046.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20
	[0046.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.406] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0046.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0046.406] lstrlenW (lpString=".doc") returned 4
	[0046.406] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0046.406] lstrlenW (lpString=".docx") returned 5
	[0046.406] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0046.406] lstrlenW (lpString=".pdf") returned 4
	[0046.406] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0046.406] lstrlenW (lpString=".xls") returned 4
	[0046.406] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0046.406] lstrlenW (lpString=".xlsx") returned 5
	[0046.406] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0046.406] lstrlenW (lpString=".ppt") returned 4
	[0046.406] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0046.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0046.406] lstrlenW (lpString=".zip") returned 4
	[0046.406] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0046.406] lstrlenW (lpString=".rar") returned 4
	[0046.406] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0046.406] lstrlenW (lpString=".bz2") returned 4
	[0046.406] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0046.406] lstrlenW (lpString=".7z") returned 3
	[0046.406] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0046.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0046.407] lstrlenW (lpString=".dbf") returned 4
	[0046.407] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0046.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0046.407] lstrlenW (lpString=".1cd") returned 4
	[0046.407] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0046.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0046.407] lstrlenW (lpString=".jpg") returned 4
	[0046.407] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0046.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0046.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0046.407] lstrlenW (lpString=".doc") returned 4
	[0046.407] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0046.407] lstrlenW (lpString=".docx") returned 5
	[0046.407] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0046.407] lstrlenW (lpString=".pdf") returned 4
	[0046.407] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0046.407] lstrlenW (lpString=".xls") returned 4
	[0046.407] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0046.407] lstrlenW (lpString=".xlsx") returned 5
	[0046.407] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0046.407] lstrlenW (lpString=".ppt") returned 4
	[0046.407] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0046.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0046.407] lstrlenW (lpString=".zip") returned 4
	[0046.407] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0046.407] lstrlenW (lpString=".rar") returned 4
	[0046.407] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0046.407] lstrlenW (lpString=".bz2") returned 4
	[0046.407] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0046.407] lstrlenW (lpString=".7z") returned 3
	[0046.407] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0046.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0046.408] lstrlenW (lpString=".dbf") returned 4
	[0046.408] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0046.408] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0046.408] lstrlenW (lpString=".1cd") returned 4
	[0046.408] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0046.408] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0046.408] lstrlenW (lpString=".jpg") returned 4
	[0046.408] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0046.408] lstrcmpiW (lpString1=".wmf", lpString2=".beets") returned 1
	[0046.408] lstrlenW (lpString="grid_(cm).wmf") returned 13
	[0046.408] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.408] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=2920) returned 1
	[0046.408] CloseHandle (hObject=0x1ec) returned 1
	[0046.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf")) returned 0x20
	[0046.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.408] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf") returned 71
	[0046.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf") returned 71
	[0046.409] lstrlenW (lpString=".doc") returned 4
	[0046.409] lstrcmpiW (lpString1=".doc", lpString2=".wmf") returned -1
	[0046.409] lstrlenW (lpString=".docx") returned 5
	[0046.409] lstrcmpiW (lpString1=".docx", lpString2=").wmf") returned 1
	[0046.409] lstrlenW (lpString=".pdf") returned 4
	[0046.409] lstrcmpiW (lpString1=".pdf", lpString2=".wmf") returned -1
	[0046.409] lstrlenW (lpString=".xls") returned 4
	[0046.409] lstrcmpiW (lpString1=".xls", lpString2=".wmf") returned 1
	[0046.409] lstrlenW (lpString=".xlsx") returned 5
	[0046.409] lstrcmpiW (lpString1=".xlsx", lpString2=").wmf") returned 1
	[0046.409] lstrlenW (lpString=".ppt") returned 4
	[0046.409] lstrcmpiW (lpString1=".ppt", lpString2=".wmf") returned -1
	[0046.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf") returned 71
	[0046.409] lstrlenW (lpString=".zip") returned 4
	[0046.409] lstrcmpiW (lpString1=".zip", lpString2=".wmf") returned 1
	[0046.409] lstrlenW (lpString=".rar") returned 4
	[0046.409] lstrcmpiW (lpString1=".rar", lpString2=".wmf") returned -1
	[0046.409] lstrlenW (lpString=".bz2") returned 4
	[0046.409] lstrcmpiW (lpString1=".bz2", lpString2=".wmf") returned -1
	[0046.409] lstrlenW (lpString=".7z") returned 3
	[0046.409] lstrcmpiW (lpString1=".7z", lpString2="wmf") returned -1
	[0046.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf") returned 71
	[0046.409] lstrlenW (lpString=".dbf") returned 4
	[0046.409] lstrcmpiW (lpString1=".dbf", lpString2=".wmf") returned -1
	[0046.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf") returned 71
	[0046.409] lstrlenW (lpString=".1cd") returned 4
	[0046.409] lstrcmpiW (lpString1=".1cd", lpString2=".wmf") returned -1
	[0046.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf") returned 71
	[0046.409] lstrlenW (lpString=".jpg") returned 4
	[0046.409] lstrcmpiW (lpString1=".jpg", lpString2=".wmf") returned -1
	[0046.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf") returned 71
	[0046.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf") returned 71
	[0046.410] lstrlenW (lpString=".doc") returned 4
	[0046.410] lstrcmpiW (lpString1=".doc", lpString2=".wmf") returned -1
	[0046.410] lstrlenW (lpString=".docx") returned 5
	[0046.410] lstrcmpiW (lpString1=".docx", lpString2=").wmf") returned 1
	[0046.410] lstrlenW (lpString=".pdf") returned 4
	[0046.410] lstrcmpiW (lpString1=".pdf", lpString2=".wmf") returned -1
	[0046.410] lstrlenW (lpString=".xls") returned 4
	[0046.410] lstrcmpiW (lpString1=".xls", lpString2=".wmf") returned 1
	[0046.410] lstrlenW (lpString=".xlsx") returned 5
	[0046.410] lstrcmpiW (lpString1=".xlsx", lpString2=").wmf") returned 1
	[0046.410] lstrlenW (lpString=".ppt") returned 4
	[0046.410] lstrcmpiW (lpString1=".ppt", lpString2=".wmf") returned -1
	[0046.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf") returned 71
	[0046.410] lstrlenW (lpString=".zip") returned 4
	[0046.410] lstrcmpiW (lpString1=".zip", lpString2=".wmf") returned 1
	[0046.410] lstrlenW (lpString=".rar") returned 4
	[0046.410] lstrcmpiW (lpString1=".rar", lpString2=".wmf") returned -1
	[0046.410] lstrlenW (lpString=".bz2") returned 4
	[0046.410] lstrcmpiW (lpString1=".bz2", lpString2=".wmf") returned -1
	[0046.410] lstrlenW (lpString=".7z") returned 3
	[0046.410] lstrcmpiW (lpString1=".7z", lpString2="wmf") returned -1
	[0046.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf") returned 71
	[0046.410] lstrlenW (lpString=".dbf") returned 4
	[0046.410] lstrcmpiW (lpString1=".dbf", lpString2=".wmf") returned -1
	[0046.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf") returned 71
	[0046.410] lstrlenW (lpString=".1cd") returned 4
	[0046.410] lstrcmpiW (lpString1=".1cd", lpString2=".wmf") returned -1
	[0046.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf") returned 71
	[0046.410] lstrlenW (lpString=".jpg") returned 4
	[0046.410] lstrcmpiW (lpString1=".jpg", lpString2=".wmf") returned -1
	[0046.411] lstrcmpiW (lpString1=".wmf", lpString2=".beets") returned 1
	[0046.411] lstrlenW (lpString="grid_(inch).wmf") returned 15
	[0046.411] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.411] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=7498) returned 1
	[0046.411] CloseHandle (hObject=0x1ec) returned 1
	[0046.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf")) returned 0x20
	[0046.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.411] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.411] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf") returned 73
	[0046.411] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf") returned 73
	[0046.411] lstrlenW (lpString=".doc") returned 4
	[0046.411] lstrcmpiW (lpString1=".doc", lpString2=".wmf") returned -1
	[0046.411] lstrlenW (lpString=".docx") returned 5
	[0046.411] lstrcmpiW (lpString1=".docx", lpString2=").wmf") returned 1
	[0046.411] lstrlenW (lpString=".pdf") returned 4
	[0046.411] lstrcmpiW (lpString1=".pdf", lpString2=".wmf") returned -1
	[0046.411] lstrlenW (lpString=".xls") returned 4
	[0046.411] lstrcmpiW (lpString1=".xls", lpString2=".wmf") returned 1
	[0046.412] lstrlenW (lpString=".xlsx") returned 5
	[0046.412] lstrcmpiW (lpString1=".xlsx", lpString2=").wmf") returned 1
	[0046.412] lstrlenW (lpString=".ppt") returned 4
	[0046.412] lstrcmpiW (lpString1=".ppt", lpString2=".wmf") returned -1
	[0046.412] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf") returned 73
	[0046.412] lstrlenW (lpString=".zip") returned 4
	[0046.412] lstrcmpiW (lpString1=".zip", lpString2=".wmf") returned 1
	[0046.412] lstrlenW (lpString=".rar") returned 4
	[0046.412] lstrcmpiW (lpString1=".rar", lpString2=".wmf") returned -1
	[0046.412] lstrlenW (lpString=".bz2") returned 4
	[0046.412] lstrcmpiW (lpString1=".bz2", lpString2=".wmf") returned -1
	[0046.412] lstrlenW (lpString=".7z") returned 3
	[0046.412] lstrcmpiW (lpString1=".7z", lpString2="wmf") returned -1
	[0046.412] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf") returned 73
	[0046.412] lstrlenW (lpString=".dbf") returned 4
	[0046.412] lstrcmpiW (lpString1=".dbf", lpString2=".wmf") returned -1
	[0046.412] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf") returned 73
	[0046.412] lstrlenW (lpString=".1cd") returned 4
	[0046.412] lstrcmpiW (lpString1=".1cd", lpString2=".wmf") returned -1
	[0046.412] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf") returned 73
	[0046.412] lstrlenW (lpString=".jpg") returned 4
	[0046.412] lstrcmpiW (lpString1=".jpg", lpString2=".wmf") returned -1
	[0046.412] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf") returned 73
	[0046.412] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf") returned 73
	[0046.412] lstrlenW (lpString=".doc") returned 4
	[0046.412] lstrcmpiW (lpString1=".doc", lpString2=".wmf") returned -1
	[0046.412] lstrlenW (lpString=".docx") returned 5
	[0046.412] lstrcmpiW (lpString1=".docx", lpString2=").wmf") returned 1
	[0046.412] lstrlenW (lpString=".pdf") returned 4
	[0046.412] lstrcmpiW (lpString1=".pdf", lpString2=".wmf") returned -1
	[0046.412] lstrlenW (lpString=".xls") returned 4
	[0046.412] lstrcmpiW (lpString1=".xls", lpString2=".wmf") returned 1
	[0046.413] lstrlenW (lpString=".xlsx") returned 5
	[0046.413] lstrcmpiW (lpString1=".xlsx", lpString2=").wmf") returned 1
	[0046.413] lstrlenW (lpString=".ppt") returned 4
	[0046.413] lstrcmpiW (lpString1=".ppt", lpString2=".wmf") returned -1
	[0046.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf") returned 73
	[0046.413] lstrlenW (lpString=".zip") returned 4
	[0046.413] lstrcmpiW (lpString1=".zip", lpString2=".wmf") returned 1
	[0046.413] lstrlenW (lpString=".rar") returned 4
	[0046.413] lstrcmpiW (lpString1=".rar", lpString2=".wmf") returned -1
	[0046.413] lstrlenW (lpString=".bz2") returned 4
	[0046.413] lstrcmpiW (lpString1=".bz2", lpString2=".wmf") returned -1
	[0046.413] lstrlenW (lpString=".7z") returned 3
	[0046.413] lstrcmpiW (lpString1=".7z", lpString2="wmf") returned -1
	[0046.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf") returned 73
	[0046.413] lstrlenW (lpString=".dbf") returned 4
	[0046.413] lstrcmpiW (lpString1=".dbf", lpString2=".wmf") returned -1
	[0046.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf") returned 73
	[0046.413] lstrlenW (lpString=".1cd") returned 4
	[0046.413] lstrcmpiW (lpString1=".1cd", lpString2=".wmf") returned -1
	[0046.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf") returned 73
	[0046.413] lstrlenW (lpString=".jpg") returned 4
	[0046.413] lstrcmpiW (lpString1=".jpg", lpString2=".wmf") returned -1
	[0046.413] lstrcmpiW (lpString1=".htm", lpString2=".beets") returned 1
	[0046.413] lstrlenW (lpString="Hand Prints.htm") returned 15
	[0046.413] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.417] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=235) returned 1
	[0046.417] CloseHandle (hObject=0x1ec) returned 1
	[0046.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20
	[0046.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.417] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.417] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm") returned 73
	[0046.417] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm") returned 73
	[0046.417] lstrlenW (lpString=".doc") returned 4
	[0046.417] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0046.417] lstrlenW (lpString=".docx") returned 5
	[0046.418] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0046.418] lstrlenW (lpString=".pdf") returned 4
	[0046.418] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0046.418] lstrlenW (lpString=".xls") returned 4
	[0046.418] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0046.418] lstrlenW (lpString=".xlsx") returned 5
	[0046.418] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0046.418] lstrlenW (lpString=".ppt") returned 4
	[0046.418] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0046.418] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm") returned 73
	[0046.418] lstrlenW (lpString=".zip") returned 4
	[0046.418] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0046.418] lstrlenW (lpString=".rar") returned 4
	[0046.418] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0046.418] lstrlenW (lpString=".bz2") returned 4
	[0046.418] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0046.418] lstrlenW (lpString=".7z") returned 3
	[0046.418] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0046.418] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm") returned 73
	[0046.418] lstrlenW (lpString=".dbf") returned 4
	[0046.418] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0046.418] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm") returned 73
	[0046.418] lstrlenW (lpString=".1cd") returned 4
	[0046.418] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0046.418] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm") returned 73
	[0046.418] lstrlenW (lpString=".jpg") returned 4
	[0046.418] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0046.418] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm") returned 73
	[0046.418] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm") returned 73
	[0046.418] lstrlenW (lpString=".doc") returned 4
	[0046.419] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0046.419] lstrlenW (lpString=".docx") returned 5
	[0046.419] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0046.419] lstrlenW (lpString=".pdf") returned 4
	[0046.419] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0046.419] lstrlenW (lpString=".xls") returned 4
	[0046.419] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0046.419] lstrlenW (lpString=".xlsx") returned 5
	[0046.419] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0046.419] lstrlenW (lpString=".ppt") returned 4
	[0046.419] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0046.419] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm") returned 73
	[0046.419] lstrlenW (lpString=".zip") returned 4
	[0046.419] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0046.419] lstrlenW (lpString=".rar") returned 4
	[0046.419] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0046.419] lstrlenW (lpString=".bz2") returned 4
	[0046.419] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0046.419] lstrlenW (lpString=".7z") returned 3
	[0046.419] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0046.419] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm") returned 73
	[0046.419] lstrlenW (lpString=".dbf") returned 4
	[0046.419] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0046.419] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm") returned 73
	[0046.419] lstrlenW (lpString=".1cd") returned 4
	[0046.419] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0046.419] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm") returned 73
	[0046.419] lstrlenW (lpString=".jpg") returned 4
	[0046.419] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0046.420] lstrcmpiW (lpString1=".jpg", lpString2=".beets") returned 1
	[0046.420] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0046.420] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.420] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=4222) returned 1
	[0046.420] CloseHandle (hObject=0x1ec) returned 1
	[0046.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20
	[0046.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.420] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.420] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg") returned 72
	[0046.420] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg") returned 72
	[0046.420] lstrlenW (lpString=".doc") returned 4
	[0046.420] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0046.420] lstrlenW (lpString=".docx") returned 5
	[0046.420] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0046.420] lstrlenW (lpString=".pdf") returned 4
	[0046.420] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0046.420] lstrlenW (lpString=".xls") returned 4
	[0046.420] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0046.420] lstrlenW (lpString=".xlsx") returned 5
	[0046.421] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0046.421] lstrlenW (lpString=".ppt") returned 4
	[0046.421] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0046.421] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg") returned 72
	[0046.421] lstrlenW (lpString=".zip") returned 4
	[0046.421] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0046.421] lstrlenW (lpString=".rar") returned 4
	[0046.421] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0046.421] lstrlenW (lpString=".bz2") returned 4
	[0046.421] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0046.421] lstrlenW (lpString=".7z") returned 3
	[0046.421] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0046.421] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg") returned 72
	[0046.421] lstrlenW (lpString=".dbf") returned 4
	[0046.421] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0046.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.451] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0046.454] GetLastError () returned 0x0
	[0046.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x621, lpOverlapped=0x0) returned 1
	[0046.455] WriteFile (in: hFile=0x200, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x630, lpOverlapped=0x0) returned 1
	[0046.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0046.456] WriteFile (in: hFile=0x200, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0046.456] SetEndOfFile (hFile=0x200) returned 1
	[0046.457] CloseHandle (hObject=0x200) returned 1
	[0046.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.457] SetEndOfFile (hFile=0x1ec) returned 1
	[0046.458] CloseHandle (hObject=0x1ec) returned 1
	[0046.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0046.458] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif")) returned 1
	[0046.459] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76
	[0046.459] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76
	[0046.459] lstrlenW (lpString=".doc") returned 4
	[0046.459] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0046.459] lstrlenW (lpString=".docx") returned 5
	[0046.459] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0046.459] lstrlenW (lpString=".pdf") returned 4
	[0046.459] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0046.459] lstrlenW (lpString=".xls") returned 4
	[0046.459] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0046.459] lstrlenW (lpString=".xlsx") returned 5
	[0046.459] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0046.459] lstrlenW (lpString=".ppt") returned 4
	[0046.459] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0046.459] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76
	[0046.459] lstrlenW (lpString=".zip") returned 4
	[0046.459] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0046.459] lstrlenW (lpString=".rar") returned 4
	[0046.459] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0046.459] lstrlenW (lpString=".bz2") returned 4
	[0046.459] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0046.459] lstrlenW (lpString=".7z") returned 3
	[0046.459] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0046.459] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76
	[0046.459] lstrlenW (lpString=".dbf") returned 4
	[0046.459] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0046.459] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76
	[0046.460] lstrlenW (lpString=".1cd") returned 4
	[0046.460] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0046.460] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76
	[0046.460] lstrlenW (lpString=".jpg") returned 4
	[0046.460] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0046.460] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76
	[0046.460] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76
	[0046.460] lstrlenW (lpString=".doc") returned 4
	[0046.460] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0046.460] lstrlenW (lpString=".docx") returned 5
	[0046.460] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0046.460] lstrlenW (lpString=".pdf") returned 4
	[0046.460] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0046.460] lstrlenW (lpString=".xls") returned 4
	[0046.460] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0046.460] lstrlenW (lpString=".xlsx") returned 5
	[0046.460] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0046.460] lstrlenW (lpString=".ppt") returned 4
	[0046.460] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0046.460] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76
	[0046.460] lstrlenW (lpString=".zip") returned 4
	[0046.460] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0046.460] lstrlenW (lpString=".rar") returned 4
	[0046.460] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0046.460] lstrlenW (lpString=".bz2") returned 4
	[0046.460] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0046.460] lstrlenW (lpString=".7z") returned 3
	[0046.460] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0046.460] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76
	[0046.460] lstrlenW (lpString=".dbf") returned 4
	[0046.460] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0046.460] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76
	[0046.460] lstrlenW (lpString=".1cd") returned 4
	[0046.461] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0046.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF") returned 76
	[0046.461] lstrlenW (lpString=".jpg") returned 4
	[0046.461] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0046.461] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0046.461] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0046.461] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.462] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=2985) returned 1
	[0046.462] CloseHandle (hObject=0x1ec) returned 1
	[0046.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif")) returned 0x20
	[0046.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.462] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.462] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0046.464] GetLastError () returned 0x0
	[0046.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xba9, lpOverlapped=0x0) returned 1
	[0046.465] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xbb0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xbb0, lpOverlapped=0x0) returned 1
	[0046.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0046.466] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0046.466] SetEndOfFile (hFile=0x220) returned 1
	[0046.466] CloseHandle (hObject=0x220) returned 1
	[0046.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.467] SetEndOfFile (hFile=0x1ec) returned 1
	[0046.468] CloseHandle (hObject=0x1ec) returned 1
	[0046.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0046.468] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif")) returned 1
	[0046.468] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74
	[0046.468] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74
	[0046.468] lstrlenW (lpString=".doc") returned 4
	[0046.468] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0046.468] lstrlenW (lpString=".docx") returned 5
	[0046.468] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0046.468] lstrlenW (lpString=".pdf") returned 4
	[0046.468] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0046.468] lstrlenW (lpString=".xls") returned 4
	[0046.468] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0046.468] lstrlenW (lpString=".xlsx") returned 5
	[0046.469] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0046.469] lstrlenW (lpString=".ppt") returned 4
	[0046.469] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0046.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74
	[0046.469] lstrlenW (lpString=".zip") returned 4
	[0046.469] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0046.469] lstrlenW (lpString=".rar") returned 4
	[0046.469] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0046.469] lstrlenW (lpString=".bz2") returned 4
	[0046.469] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0046.469] lstrlenW (lpString=".7z") returned 3
	[0046.469] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0046.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74
	[0046.469] lstrlenW (lpString=".dbf") returned 4
	[0046.469] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0046.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74
	[0046.469] lstrlenW (lpString=".1cd") returned 4
	[0046.469] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0046.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74
	[0046.469] lstrlenW (lpString=".jpg") returned 4
	[0046.469] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0046.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74
	[0046.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74
	[0046.469] lstrlenW (lpString=".doc") returned 4
	[0046.469] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0046.469] lstrlenW (lpString=".docx") returned 5
	[0046.469] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0046.469] lstrlenW (lpString=".pdf") returned 4
	[0046.469] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0046.469] lstrlenW (lpString=".xls") returned 4
	[0046.469] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0046.469] lstrlenW (lpString=".xlsx") returned 5
	[0046.469] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0046.470] lstrlenW (lpString=".ppt") returned 4
	[0046.470] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0046.470] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74
	[0046.470] lstrlenW (lpString=".zip") returned 4
	[0046.470] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0046.470] lstrlenW (lpString=".rar") returned 4
	[0046.470] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0046.470] lstrlenW (lpString=".bz2") returned 4
	[0046.470] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0046.470] lstrlenW (lpString=".7z") returned 3
	[0046.470] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0046.470] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74
	[0046.470] lstrlenW (lpString=".dbf") returned 4
	[0046.470] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0046.470] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74
	[0046.470] lstrlenW (lpString=".1cd") returned 4
	[0046.470] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0046.470] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF") returned 74
	[0046.470] lstrlenW (lpString=".jpg") returned 4
	[0046.470] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0046.470] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0046.470] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0046.470] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.471] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=19780) returned 1
	[0046.471] CloseHandle (hObject=0x1ec) returned 1
	[0046.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png")) returned 0x20
	[0046.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.471] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.472] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0046.472] GetLastError () returned 0x0
	[0046.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x4d44, lpOverlapped=0x0) returned 1
	[0046.847] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x4d50, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x4d50, lpOverlapped=0x0) returned 1
	[0046.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0046.848] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0046.848] SetEndOfFile (hFile=0x220) returned 1
	[0046.849] CloseHandle (hObject=0x220) returned 1
	[0046.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.849] SetEndOfFile (hFile=0x1ec) returned 1
	[0046.850] CloseHandle (hObject=0x1ec) returned 1
	[0046.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0046.851] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png")) returned 1
	[0046.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75
	[0046.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75
	[0046.851] lstrlenW (lpString=".doc") returned 4
	[0046.851] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0046.851] lstrlenW (lpString=".docx") returned 5
	[0046.851] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0046.851] lstrlenW (lpString=".pdf") returned 4
	[0046.851] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0046.851] lstrlenW (lpString=".xls") returned 4
	[0046.851] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0046.851] lstrlenW (lpString=".xlsx") returned 5
	[0046.851] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0046.851] lstrlenW (lpString=".ppt") returned 4
	[0046.851] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0046.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75
	[0046.851] lstrlenW (lpString=".zip") returned 4
	[0046.851] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0046.851] lstrlenW (lpString=".rar") returned 4
	[0046.851] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0046.851] lstrlenW (lpString=".bz2") returned 4
	[0046.851] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0046.852] lstrlenW (lpString=".7z") returned 3
	[0046.852] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0046.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75
	[0046.852] lstrlenW (lpString=".dbf") returned 4
	[0046.852] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0046.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75
	[0046.852] lstrlenW (lpString=".1cd") returned 4
	[0046.852] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0046.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75
	[0046.852] lstrlenW (lpString=".jpg") returned 4
	[0046.852] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0046.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75
	[0046.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75
	[0046.852] lstrlenW (lpString=".doc") returned 4
	[0046.852] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0046.852] lstrlenW (lpString=".docx") returned 5
	[0046.852] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0046.852] lstrlenW (lpString=".pdf") returned 4
	[0046.852] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0046.852] lstrlenW (lpString=".xls") returned 4
	[0046.852] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0046.852] lstrlenW (lpString=".xlsx") returned 5
	[0046.852] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0046.852] lstrlenW (lpString=".ppt") returned 4
	[0046.852] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0046.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75
	[0046.852] lstrlenW (lpString=".zip") returned 4
	[0046.852] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0046.852] lstrlenW (lpString=".rar") returned 4
	[0046.852] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0046.852] lstrlenW (lpString=".bz2") returned 4
	[0046.852] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0046.853] lstrlenW (lpString=".7z") returned 3
	[0046.853] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0046.853] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75
	[0046.853] lstrlenW (lpString=".dbf") returned 4
	[0046.853] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0046.853] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75
	[0046.853] lstrlenW (lpString=".1cd") returned 4
	[0046.853] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0046.853] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG") returned 75
	[0046.853] lstrlenW (lpString=".jpg") returned 4
	[0046.853] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0046.853] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0046.853] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0046.853] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.901] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=20627) returned 1
	[0046.901] CloseHandle (hObject=0x1ec) returned 1
	[0046.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png")) returned 0x20
	[0046.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.902] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.902] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0046.902] GetLastError () returned 0x0
	[0046.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x5093, lpOverlapped=0x0) returned 1
	[0046.904] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x50a0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x50a0, lpOverlapped=0x0) returned 1
	[0046.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0046.905] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0046.906] SetEndOfFile (hFile=0x220) returned 1
	[0046.906] CloseHandle (hObject=0x220) returned 1
	[0046.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.907] SetEndOfFile (hFile=0x1ec) returned 1
	[0046.908] CloseHandle (hObject=0x1ec) returned 1
	[0046.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0046.908] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png")) returned 1
	[0046.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75
	[0046.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75
	[0046.915] lstrlenW (lpString=".doc") returned 4
	[0046.915] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0046.915] lstrlenW (lpString=".docx") returned 5
	[0046.915] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0046.915] lstrlenW (lpString=".pdf") returned 4
	[0046.915] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0046.915] lstrlenW (lpString=".xls") returned 4
	[0046.915] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0046.915] lstrlenW (lpString=".xlsx") returned 5
	[0046.915] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0046.915] lstrlenW (lpString=".ppt") returned 4
	[0046.915] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0046.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75
	[0046.915] lstrlenW (lpString=".zip") returned 4
	[0046.915] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0046.915] lstrlenW (lpString=".rar") returned 4
	[0046.915] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0046.915] lstrlenW (lpString=".bz2") returned 4
	[0046.915] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0046.915] lstrlenW (lpString=".7z") returned 3
	[0046.915] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0046.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75
	[0046.915] lstrlenW (lpString=".dbf") returned 4
	[0046.915] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0046.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75
	[0046.915] lstrlenW (lpString=".1cd") returned 4
	[0046.915] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0046.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75
	[0046.916] lstrlenW (lpString=".jpg") returned 4
	[0046.916] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0046.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75
	[0046.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75
	[0046.916] lstrlenW (lpString=".doc") returned 4
	[0046.916] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0046.916] lstrlenW (lpString=".docx") returned 5
	[0046.916] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0046.916] lstrlenW (lpString=".pdf") returned 4
	[0046.916] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0046.916] lstrlenW (lpString=".xls") returned 4
	[0046.916] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0046.916] lstrlenW (lpString=".xlsx") returned 5
	[0046.916] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0046.916] lstrlenW (lpString=".ppt") returned 4
	[0046.916] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0046.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75
	[0046.916] lstrlenW (lpString=".zip") returned 4
	[0046.916] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0046.916] lstrlenW (lpString=".rar") returned 4
	[0046.916] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0046.916] lstrlenW (lpString=".bz2") returned 4
	[0046.916] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0046.916] lstrlenW (lpString=".7z") returned 3
	[0046.916] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0046.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75
	[0046.916] lstrlenW (lpString=".dbf") returned 4
	[0046.916] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0046.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75
	[0046.916] lstrlenW (lpString=".1cd") returned 4
	[0046.916] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0046.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG") returned 75
	[0046.917] lstrlenW (lpString=".jpg") returned 4
	[0046.917] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0046.917] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0046.917] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0046.917] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.917] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1560) returned 1
	[0046.917] CloseHandle (hObject=0x1ec) returned 1
	[0046.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif")) returned 0x20
	[0046.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.918] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.918] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0046.919] GetLastError () returned 0x0
	[0046.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x618, lpOverlapped=0x0) returned 1
	[0046.921] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x620, lpOverlapped=0x0) returned 1
	[0046.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0046.922] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0046.922] SetEndOfFile (hFile=0x220) returned 1
	[0046.922] CloseHandle (hObject=0x220) returned 1
	[0046.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.923] SetEndOfFile (hFile=0x1ec) returned 1
	[0046.924] CloseHandle (hObject=0x1ec) returned 1
	[0046.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0046.924] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif")) returned 1
	[0046.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76
	[0046.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76
	[0046.924] lstrlenW (lpString=".doc") returned 4
	[0046.924] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0046.924] lstrlenW (lpString=".docx") returned 5
	[0046.925] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0046.925] lstrlenW (lpString=".pdf") returned 4
	[0046.925] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0046.925] lstrlenW (lpString=".xls") returned 4
	[0046.925] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0046.925] lstrlenW (lpString=".xlsx") returned 5
	[0046.925] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0046.925] lstrlenW (lpString=".ppt") returned 4
	[0046.925] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0046.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76
	[0046.925] lstrlenW (lpString=".zip") returned 4
	[0046.925] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0046.925] lstrlenW (lpString=".rar") returned 4
	[0046.925] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0046.925] lstrlenW (lpString=".bz2") returned 4
	[0046.925] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0046.925] lstrlenW (lpString=".7z") returned 3
	[0046.925] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0046.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76
	[0046.925] lstrlenW (lpString=".dbf") returned 4
	[0046.925] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0046.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76
	[0046.925] lstrlenW (lpString=".1cd") returned 4
	[0046.925] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0046.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76
	[0046.925] lstrlenW (lpString=".jpg") returned 4
	[0046.925] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0046.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76
	[0046.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76
	[0046.925] lstrlenW (lpString=".doc") returned 4
	[0046.925] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0046.926] lstrlenW (lpString=".docx") returned 5
	[0046.926] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0046.926] lstrlenW (lpString=".pdf") returned 4
	[0046.926] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0046.926] lstrlenW (lpString=".xls") returned 4
	[0046.926] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0046.926] lstrlenW (lpString=".xlsx") returned 5
	[0046.926] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0046.926] lstrlenW (lpString=".ppt") returned 4
	[0046.926] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0046.926] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76
	[0046.926] lstrlenW (lpString=".zip") returned 4
	[0046.926] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0046.926] lstrlenW (lpString=".rar") returned 4
	[0046.926] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0046.926] lstrlenW (lpString=".bz2") returned 4
	[0046.926] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0046.926] lstrlenW (lpString=".7z") returned 3
	[0046.926] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0046.926] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76
	[0046.926] lstrlenW (lpString=".dbf") returned 4
	[0046.926] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0046.926] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76
	[0046.926] lstrlenW (lpString=".1cd") returned 4
	[0046.926] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0046.926] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF") returned 76
	[0046.926] lstrlenW (lpString=".jpg") returned 4
	[0046.926] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0046.926] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0046.927] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0046.927] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.927] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=33009) returned 1
	[0046.927] CloseHandle (hObject=0x1ec) returned 1
	[0046.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png")) returned 0x20
	[0046.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.927] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0046.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.927] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0046.928] GetLastError () returned 0x0
	[0046.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x80f1, lpOverlapped=0x0) returned 1
	[0047.269] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x8100, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x8100, lpOverlapped=0x0) returned 1
	[0047.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.271] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0047.271] SetEndOfFile (hFile=0x220) returned 1
	[0047.271] CloseHandle (hObject=0x220) returned 1
	[0047.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.271] SetEndOfFile (hFile=0x1ec) returned 1
	[0047.272] CloseHandle (hObject=0x1ec) returned 1
	[0047.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.272] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png")) returned 1
	[0047.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77
	[0047.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77
	[0047.273] lstrlenW (lpString=".doc") returned 4
	[0047.273] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.273] lstrlenW (lpString=".docx") returned 5
	[0047.273] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.273] lstrlenW (lpString=".pdf") returned 4
	[0047.273] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.273] lstrlenW (lpString=".xls") returned 4
	[0047.273] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.273] lstrlenW (lpString=".xlsx") returned 5
	[0047.273] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.273] lstrlenW (lpString=".ppt") returned 4
	[0047.273] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77
	[0047.273] lstrlenW (lpString=".zip") returned 4
	[0047.273] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.273] lstrlenW (lpString=".rar") returned 4
	[0047.273] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.273] lstrlenW (lpString=".bz2") returned 4
	[0047.273] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.273] lstrlenW (lpString=".7z") returned 3
	[0047.273] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77
	[0047.273] lstrlenW (lpString=".dbf") returned 4
	[0047.273] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77
	[0047.273] lstrlenW (lpString=".1cd") returned 4
	[0047.273] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77
	[0047.274] lstrlenW (lpString=".jpg") returned 4
	[0047.274] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77
	[0047.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77
	[0047.274] lstrlenW (lpString=".doc") returned 4
	[0047.274] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.274] lstrlenW (lpString=".docx") returned 5
	[0047.274] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.274] lstrlenW (lpString=".pdf") returned 4
	[0047.274] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.274] lstrlenW (lpString=".xls") returned 4
	[0047.274] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.274] lstrlenW (lpString=".xlsx") returned 5
	[0047.274] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.274] lstrlenW (lpString=".ppt") returned 4
	[0047.274] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77
	[0047.274] lstrlenW (lpString=".zip") returned 4
	[0047.274] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.274] lstrlenW (lpString=".rar") returned 4
	[0047.274] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.274] lstrlenW (lpString=".bz2") returned 4
	[0047.274] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.274] lstrlenW (lpString=".7z") returned 3
	[0047.274] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77
	[0047.274] lstrlenW (lpString=".dbf") returned 4
	[0047.274] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77
	[0047.274] lstrlenW (lpString=".1cd") returned 4
	[0047.274] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.275] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG") returned 77
	[0047.275] lstrlenW (lpString=".jpg") returned 4
	[0047.275] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.275] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0047.275] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0047.275] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0047.687] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1363) returned 1
	[0047.687] CloseHandle (hObject=0x1f0) returned 1
	[0047.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif")) returned 0x20
	[0047.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.687] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0047.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.687] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0048.073] GetLastError () returned 0x0
	[0048.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x553, lpOverlapped=0x0) returned 1
	[0048.093] WriteFile (in: hFile=0x20c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x560, lpOverlapped=0x0) returned 1
	[0048.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.095] WriteFile (in: hFile=0x20c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0048.095] SetEndOfFile (hFile=0x20c) returned 1
	[0048.095] CloseHandle (hObject=0x20c) returned 1
	[0048.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.095] SetEndOfFile (hFile=0x1f0) returned 1
	[0048.096] CloseHandle (hObject=0x1f0) returned 1
	[0048.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0048.096] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif")) returned 1
	[0048.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75
	[0048.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75
	[0048.096] lstrlenW (lpString=".doc") returned 4
	[0048.096] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0048.096] lstrlenW (lpString=".docx") returned 5
	[0048.096] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0048.096] lstrlenW (lpString=".pdf") returned 4
	[0048.096] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0048.096] lstrlenW (lpString=".xls") returned 4
	[0048.097] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0048.097] lstrlenW (lpString=".xlsx") returned 5
	[0048.097] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0048.097] lstrlenW (lpString=".ppt") returned 4
	[0048.097] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0048.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75
	[0048.097] lstrlenW (lpString=".zip") returned 4
	[0048.097] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0048.097] lstrlenW (lpString=".rar") returned 4
	[0048.097] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0048.097] lstrlenW (lpString=".bz2") returned 4
	[0048.097] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0048.097] lstrlenW (lpString=".7z") returned 3
	[0048.097] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0048.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75
	[0048.097] lstrlenW (lpString=".dbf") returned 4
	[0048.097] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0048.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75
	[0048.097] lstrlenW (lpString=".1cd") returned 4
	[0048.097] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0048.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75
	[0048.097] lstrlenW (lpString=".jpg") returned 4
	[0048.097] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0048.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75
	[0048.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75
	[0048.097] lstrlenW (lpString=".doc") returned 4
	[0048.097] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0048.097] lstrlenW (lpString=".docx") returned 5
	[0048.097] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0048.097] lstrlenW (lpString=".pdf") returned 4
	[0048.097] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0048.097] lstrlenW (lpString=".xls") returned 4
	[0048.098] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0048.098] lstrlenW (lpString=".xlsx") returned 5
	[0048.098] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0048.098] lstrlenW (lpString=".ppt") returned 4
	[0048.098] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0048.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75
	[0048.098] lstrlenW (lpString=".zip") returned 4
	[0048.098] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0048.098] lstrlenW (lpString=".rar") returned 4
	[0048.098] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0048.098] lstrlenW (lpString=".bz2") returned 4
	[0048.098] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0048.098] lstrlenW (lpString=".7z") returned 3
	[0048.098] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0048.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75
	[0048.098] lstrlenW (lpString=".dbf") returned 4
	[0048.098] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0048.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75
	[0048.098] lstrlenW (lpString=".1cd") returned 4
	[0048.098] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0048.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF") returned 75
	[0048.098] lstrlenW (lpString=".jpg") returned 4
	[0048.098] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0048.098] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0048.098] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0048.098] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0048.099] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=25106) returned 1
	[0048.099] CloseHandle (hObject=0x1f0) returned 1
	[0048.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png")) returned 0x20
	[0048.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.099] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0048.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.099] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0048.099] GetLastError () returned 0x0
	[0048.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x6212, lpOverlapped=0x0) returned 1
	[0048.107] WriteFile (in: hFile=0x20c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x6220, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x6220, lpOverlapped=0x0) returned 1
	[0048.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.109] WriteFile (in: hFile=0x20c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0048.109] SetEndOfFile (hFile=0x20c) returned 1
	[0048.109] CloseHandle (hObject=0x20c) returned 1
	[0048.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.109] SetEndOfFile (hFile=0x1f0) returned 1
	[0048.110] CloseHandle (hObject=0x1f0) returned 1
	[0048.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0048.111] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png")) returned 1
	[0048.111] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73
	[0048.111] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73
	[0048.111] lstrlenW (lpString=".doc") returned 4
	[0048.111] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0048.111] lstrlenW (lpString=".docx") returned 5
	[0048.111] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0048.111] lstrlenW (lpString=".pdf") returned 4
	[0048.111] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0048.111] lstrlenW (lpString=".xls") returned 4
	[0048.111] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0048.111] lstrlenW (lpString=".xlsx") returned 5
	[0048.111] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0048.111] lstrlenW (lpString=".ppt") returned 4
	[0048.111] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0048.111] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73
	[0048.111] lstrlenW (lpString=".zip") returned 4
	[0048.111] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0048.111] lstrlenW (lpString=".rar") returned 4
	[0048.111] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0048.111] lstrlenW (lpString=".bz2") returned 4
	[0048.111] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0048.111] lstrlenW (lpString=".7z") returned 3
	[0048.111] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0048.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73
	[0048.112] lstrlenW (lpString=".dbf") returned 4
	[0048.112] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0048.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73
	[0048.112] lstrlenW (lpString=".1cd") returned 4
	[0048.112] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0048.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73
	[0048.112] lstrlenW (lpString=".jpg") returned 4
	[0048.112] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0048.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73
	[0048.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73
	[0048.112] lstrlenW (lpString=".doc") returned 4
	[0048.112] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0048.112] lstrlenW (lpString=".docx") returned 5
	[0048.112] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0048.112] lstrlenW (lpString=".pdf") returned 4
	[0048.112] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0048.112] lstrlenW (lpString=".xls") returned 4
	[0048.112] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0048.112] lstrlenW (lpString=".xlsx") returned 5
	[0048.112] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0048.112] lstrlenW (lpString=".ppt") returned 4
	[0048.112] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0048.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73
	[0048.112] lstrlenW (lpString=".zip") returned 4
	[0048.112] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0048.112] lstrlenW (lpString=".rar") returned 4
	[0048.112] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0048.112] lstrlenW (lpString=".bz2") returned 4
	[0048.112] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0048.112] lstrlenW (lpString=".7z") returned 3
	[0048.112] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0048.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73
	[0048.113] lstrlenW (lpString=".dbf") returned 4
	[0048.113] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0048.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73
	[0048.113] lstrlenW (lpString=".1cd") returned 4
	[0048.113] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0048.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG") returned 73
	[0048.113] lstrlenW (lpString=".jpg") returned 4
	[0048.113] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0048.113] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0048.113] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0048.113] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0048.455] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=32403) returned 1
	[0048.455] CloseHandle (hObject=0x210) returned 1
	[0048.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png")) returned 0x20
	[0048.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.455] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0048.456] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.456] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.456] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0048.456] GetLastError () returned 0x0
	[0048.456] ReadFile (in: hFile=0x210, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x7e93, lpOverlapped=0x0) returned 1
	[0048.458] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x7ea0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x7ea0, lpOverlapped=0x0) returned 1
	[0048.459] ReadFile (in: hFile=0x210, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.459] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0048.459] SetEndOfFile (hFile=0x220) returned 1
	[0048.459] CloseHandle (hObject=0x220) returned 1
	[0048.460] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.460] SetEndOfFile (hFile=0x210) returned 1
	[0048.460] CloseHandle (hObject=0x210) returned 1
	[0048.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0048.461] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png")) returned 1
	[0048.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76
	[0048.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76
	[0048.461] lstrlenW (lpString=".doc") returned 4
	[0048.461] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0048.461] lstrlenW (lpString=".docx") returned 5
	[0048.461] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0048.461] lstrlenW (lpString=".pdf") returned 4
	[0048.461] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0048.461] lstrlenW (lpString=".xls") returned 4
	[0048.461] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0048.461] lstrlenW (lpString=".xlsx") returned 5
	[0048.461] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0048.461] lstrlenW (lpString=".ppt") returned 4
	[0048.461] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0048.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76
	[0048.462] lstrlenW (lpString=".zip") returned 4
	[0048.462] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0048.462] lstrlenW (lpString=".rar") returned 4
	[0048.462] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0048.462] lstrlenW (lpString=".bz2") returned 4
	[0048.462] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0048.462] lstrlenW (lpString=".7z") returned 3
	[0048.462] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0048.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76
	[0048.462] lstrlenW (lpString=".dbf") returned 4
	[0048.462] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0048.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76
	[0048.462] lstrlenW (lpString=".1cd") returned 4
	[0048.462] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0048.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76
	[0048.462] lstrlenW (lpString=".jpg") returned 4
	[0048.462] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0048.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76
	[0048.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76
	[0048.462] lstrlenW (lpString=".doc") returned 4
	[0048.462] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0048.462] lstrlenW (lpString=".docx") returned 5
	[0048.462] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0048.462] lstrlenW (lpString=".pdf") returned 4
	[0048.462] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0048.462] lstrlenW (lpString=".xls") returned 4
	[0048.462] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0048.462] lstrlenW (lpString=".xlsx") returned 5
	[0048.462] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0048.462] lstrlenW (lpString=".ppt") returned 4
	[0048.462] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0048.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76
	[0048.462] lstrlenW (lpString=".zip") returned 4
	[0048.463] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0048.463] lstrlenW (lpString=".rar") returned 4
	[0048.463] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0048.463] lstrlenW (lpString=".bz2") returned 4
	[0048.463] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0048.463] lstrlenW (lpString=".7z") returned 3
	[0048.463] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0048.463] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76
	[0048.463] lstrlenW (lpString=".dbf") returned 4
	[0048.463] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0048.463] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76
	[0048.463] lstrlenW (lpString=".1cd") returned 4
	[0048.463] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0048.463] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG") returned 76
	[0048.463] lstrlenW (lpString=".jpg") returned 4
	[0048.463] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0048.463] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0048.463] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0048.463] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0048.463] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1354) returned 1
	[0048.464] CloseHandle (hObject=0x210) returned 1
	[0048.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif")) returned 0x20
	[0048.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.464] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0048.464] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.464] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.464] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0049.370] GetLastError () returned 0x0
	[0049.370] ReadFile (in: hFile=0x210, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x54a, lpOverlapped=0x0) returned 1
	[0049.845] WriteFile (in: hFile=0x1d8, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x550, lpOverlapped=0x0) returned 1
	[0049.846] ReadFile (in: hFile=0x210, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.846] WriteFile (in: hFile=0x1d8, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0049.846] SetEndOfFile (hFile=0x1d8) returned 1
	[0049.847] CloseHandle (hObject=0x1d8) returned 1
	[0049.847] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.847] SetEndOfFile (hFile=0x210) returned 1
	[0049.847] CloseHandle (hObject=0x210) returned 1
	[0049.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0049.848] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif")) returned 1
	[0049.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76
	[0049.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76
	[0049.848] lstrlenW (lpString=".doc") returned 4
	[0049.848] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0049.848] lstrlenW (lpString=".docx") returned 5
	[0049.848] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0049.848] lstrlenW (lpString=".pdf") returned 4
	[0049.848] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0049.848] lstrlenW (lpString=".xls") returned 4
	[0049.848] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0049.848] lstrlenW (lpString=".xlsx") returned 5
	[0049.848] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0049.848] lstrlenW (lpString=".ppt") returned 4
	[0049.848] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0049.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76
	[0049.848] lstrlenW (lpString=".zip") returned 4
	[0049.849] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0049.849] lstrlenW (lpString=".rar") returned 4
	[0049.849] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0049.849] lstrlenW (lpString=".bz2") returned 4
	[0049.849] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0049.849] lstrlenW (lpString=".7z") returned 3
	[0049.849] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0049.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76
	[0049.849] lstrlenW (lpString=".dbf") returned 4
	[0049.849] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0049.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76
	[0049.849] lstrlenW (lpString=".1cd") returned 4
	[0049.849] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0049.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76
	[0049.849] lstrlenW (lpString=".jpg") returned 4
	[0049.849] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0049.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76
	[0049.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76
	[0049.849] lstrlenW (lpString=".doc") returned 4
	[0049.849] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0049.849] lstrlenW (lpString=".docx") returned 5
	[0049.849] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0049.849] lstrlenW (lpString=".pdf") returned 4
	[0049.849] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0049.849] lstrlenW (lpString=".xls") returned 4
	[0049.849] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0049.849] lstrlenW (lpString=".xlsx") returned 5
	[0049.849] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0049.852] lstrlenW (lpString=".ppt") returned 4
	[0049.852] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0049.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76
	[0049.852] lstrlenW (lpString=".zip") returned 4
	[0049.852] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0049.852] lstrlenW (lpString=".rar") returned 4
	[0049.852] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0049.852] lstrlenW (lpString=".bz2") returned 4
	[0049.852] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0049.852] lstrlenW (lpString=".7z") returned 3
	[0049.852] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0049.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76
	[0049.852] lstrlenW (lpString=".dbf") returned 4
	[0049.852] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0049.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76
	[0049.852] lstrlenW (lpString=".1cd") returned 4
	[0049.853] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0049.853] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF") returned 76
	[0049.853] lstrlenW (lpString=".jpg") returned 4
	[0049.853] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0049.853] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0049.853] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0049.853] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0049.956] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=19485) returned 1
	[0049.956] CloseHandle (hObject=0x1b8) returned 1
	[0049.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png")) returned 0x20
	[0049.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.956] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0049.956] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.956] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.956] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0049.956] GetLastError () returned 0x0
	[0049.956] ReadFile (in: hFile=0x1b8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x4c1d, lpOverlapped=0x0) returned 1
	[0049.958] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x4c20, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x4c20, lpOverlapped=0x0) returned 1
	[0049.960] ReadFile (in: hFile=0x1b8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.960] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0049.960] SetEndOfFile (hFile=0x194) returned 1
	[0049.960] CloseHandle (hObject=0x194) returned 1
	[0049.960] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.960] SetEndOfFile (hFile=0x1b8) returned 1
	[0049.961] CloseHandle (hObject=0x1b8) returned 1
	[0049.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0049.961] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png")) returned 1
	[0049.961] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73
	[0049.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73
	[0049.962] lstrlenW (lpString=".doc") returned 4
	[0049.962] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0049.962] lstrlenW (lpString=".docx") returned 5
	[0049.962] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0049.962] lstrlenW (lpString=".pdf") returned 4
	[0049.962] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0049.962] lstrlenW (lpString=".xls") returned 4
	[0049.962] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0049.962] lstrlenW (lpString=".xlsx") returned 5
	[0049.962] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0049.962] lstrlenW (lpString=".ppt") returned 4
	[0049.962] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0049.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73
	[0049.962] lstrlenW (lpString=".zip") returned 4
	[0049.962] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0049.962] lstrlenW (lpString=".rar") returned 4
	[0049.962] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0049.962] lstrlenW (lpString=".bz2") returned 4
	[0049.962] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0049.962] lstrlenW (lpString=".7z") returned 3
	[0049.962] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0049.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73
	[0049.962] lstrlenW (lpString=".dbf") returned 4
	[0049.962] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0049.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73
	[0049.962] lstrlenW (lpString=".1cd") returned 4
	[0049.962] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0049.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73
	[0049.962] lstrlenW (lpString=".jpg") returned 4
	[0049.962] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0049.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73
	[0049.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73
	[0049.963] lstrlenW (lpString=".doc") returned 4
	[0049.963] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0049.963] lstrlenW (lpString=".docx") returned 5
	[0049.963] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0049.963] lstrlenW (lpString=".pdf") returned 4
	[0049.963] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0049.963] lstrlenW (lpString=".xls") returned 4
	[0049.963] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0049.963] lstrlenW (lpString=".xlsx") returned 5
	[0049.963] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0049.963] lstrlenW (lpString=".ppt") returned 4
	[0049.963] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0049.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73
	[0049.963] lstrlenW (lpString=".zip") returned 4
	[0049.963] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0049.963] lstrlenW (lpString=".rar") returned 4
	[0049.963] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0049.963] lstrlenW (lpString=".bz2") returned 4
	[0049.963] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0049.963] lstrlenW (lpString=".7z") returned 3
	[0049.963] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0049.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73
	[0049.963] lstrlenW (lpString=".dbf") returned 4
	[0049.963] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0049.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73
	[0049.963] lstrlenW (lpString=".1cd") returned 4
	[0049.963] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0049.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG") returned 73
	[0049.963] lstrlenW (lpString=".jpg") returned 4
	[0049.963] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0049.964] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0049.964] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0049.964] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0050.352] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=18413) returned 1
	[0050.352] CloseHandle (hObject=0x1f8) returned 1
	[0050.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png")) returned 0x20
	[0050.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.352] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0050.352] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.358] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.359] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0050.397] GetLastError () returned 0x0
	[0050.397] ReadFile (in: hFile=0x1f8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x47ed, lpOverlapped=0x0) returned 1
	[0050.409] WriteFile (in: hFile=0x1e8, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x47f0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x47f0, lpOverlapped=0x0) returned 1
	[0050.410] ReadFile (in: hFile=0x1f8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.410] WriteFile (in: hFile=0x1e8, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0050.410] SetEndOfFile (hFile=0x1e8) returned 1
	[0050.410] CloseHandle (hObject=0x1e8) returned 1
	[0050.410] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.411] SetEndOfFile (hFile=0x1f8) returned 1
	[0050.412] CloseHandle (hObject=0x1f8) returned 1
	[0050.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.412] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png")) returned 1
	[0050.412] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76
	[0050.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76
	[0050.413] lstrlenW (lpString=".doc") returned 4
	[0050.413] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.413] lstrlenW (lpString=".docx") returned 5
	[0050.413] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.413] lstrlenW (lpString=".pdf") returned 4
	[0050.413] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.413] lstrlenW (lpString=".xls") returned 4
	[0050.413] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.413] lstrlenW (lpString=".xlsx") returned 5
	[0050.413] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.413] lstrlenW (lpString=".ppt") returned 4
	[0050.413] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76
	[0050.413] lstrlenW (lpString=".zip") returned 4
	[0050.413] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.413] lstrlenW (lpString=".rar") returned 4
	[0050.413] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.413] lstrlenW (lpString=".bz2") returned 4
	[0050.413] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.413] lstrlenW (lpString=".7z") returned 3
	[0050.413] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76
	[0050.413] lstrlenW (lpString=".dbf") returned 4
	[0050.413] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76
	[0050.413] lstrlenW (lpString=".1cd") returned 4
	[0050.413] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.413] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76
	[0050.413] lstrlenW (lpString=".jpg") returned 4
	[0050.413] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.414] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76
	[0050.414] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76
	[0050.414] lstrlenW (lpString=".doc") returned 4
	[0050.414] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.414] lstrlenW (lpString=".docx") returned 5
	[0050.414] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.414] lstrlenW (lpString=".pdf") returned 4
	[0050.414] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.414] lstrlenW (lpString=".xls") returned 4
	[0050.414] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.414] lstrlenW (lpString=".xlsx") returned 5
	[0050.414] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.414] lstrlenW (lpString=".ppt") returned 4
	[0050.414] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.414] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76
	[0050.414] lstrlenW (lpString=".zip") returned 4
	[0050.414] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.414] lstrlenW (lpString=".rar") returned 4
	[0050.414] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.414] lstrlenW (lpString=".bz2") returned 4
	[0050.414] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.414] lstrlenW (lpString=".7z") returned 3
	[0050.414] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.414] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76
	[0050.414] lstrlenW (lpString=".dbf") returned 4
	[0050.414] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.414] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76
	[0050.414] lstrlenW (lpString=".1cd") returned 4
	[0050.414] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.414] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG") returned 76
	[0050.414] lstrlenW (lpString=".jpg") returned 4
	[0050.414] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.415] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0050.415] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0050.415] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0050.442] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=44850) returned 1
	[0050.442] CloseHandle (hObject=0x1e8) returned 1
	[0050.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png")) returned 0x20
	[0050.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.443] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0050.443] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.443] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.443] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0050.443] GetLastError () returned 0x0
	[0050.443] ReadFile (in: hFile=0x1e8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xaf32, lpOverlapped=0x0) returned 1
	[0050.456] WriteFile (in: hFile=0x210, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xaf40, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xaf40, lpOverlapped=0x0) returned 1
	[0050.457] ReadFile (in: hFile=0x1e8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.457] WriteFile (in: hFile=0x210, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0050.458] SetEndOfFile (hFile=0x210) returned 1
	[0050.458] CloseHandle (hObject=0x210) returned 1
	[0050.458] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.458] SetEndOfFile (hFile=0x1e8) returned 1
	[0050.459] CloseHandle (hObject=0x1e8) returned 1
	[0050.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.460] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png")) returned 1
	[0050.460] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75
	[0050.460] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75
	[0050.460] lstrlenW (lpString=".doc") returned 4
	[0050.460] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.460] lstrlenW (lpString=".docx") returned 5
	[0050.460] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.460] lstrlenW (lpString=".pdf") returned 4
	[0050.460] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.460] lstrlenW (lpString=".xls") returned 4
	[0050.460] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.460] lstrlenW (lpString=".xlsx") returned 5
	[0050.460] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.460] lstrlenW (lpString=".ppt") returned 4
	[0050.460] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.460] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75
	[0050.460] lstrlenW (lpString=".zip") returned 4
	[0050.460] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.461] lstrlenW (lpString=".rar") returned 4
	[0050.461] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.461] lstrlenW (lpString=".bz2") returned 4
	[0050.461] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.461] lstrlenW (lpString=".7z") returned 3
	[0050.461] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75
	[0050.461] lstrlenW (lpString=".dbf") returned 4
	[0050.461] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75
	[0050.461] lstrlenW (lpString=".1cd") returned 4
	[0050.461] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75
	[0050.461] lstrlenW (lpString=".jpg") returned 4
	[0050.461] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75
	[0050.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75
	[0050.461] lstrlenW (lpString=".doc") returned 4
	[0050.461] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.461] lstrlenW (lpString=".docx") returned 5
	[0050.461] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.461] lstrlenW (lpString=".pdf") returned 4
	[0050.461] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.461] lstrlenW (lpString=".xls") returned 4
	[0050.461] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.461] lstrlenW (lpString=".xlsx") returned 5
	[0050.461] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.461] lstrlenW (lpString=".ppt") returned 4
	[0050.461] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75
	[0050.461] lstrlenW (lpString=".zip") returned 4
	[0050.461] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.461] lstrlenW (lpString=".rar") returned 4
	[0050.462] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.462] lstrlenW (lpString=".bz2") returned 4
	[0050.462] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.462] lstrlenW (lpString=".7z") returned 3
	[0050.462] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75
	[0050.462] lstrlenW (lpString=".dbf") returned 4
	[0050.462] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75
	[0050.462] lstrlenW (lpString=".1cd") returned 4
	[0050.462] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG") returned 75
	[0050.462] lstrlenW (lpString=".jpg") returned 4
	[0050.462] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.462] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0050.462] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0050.462] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0050.462] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1364) returned 1
	[0050.463] CloseHandle (hObject=0x1e8) returned 1
	[0050.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif")) returned 0x20
	[0050.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.463] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0050.463] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.463] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.463] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0050.466] GetLastError () returned 0x0
	[0050.466] ReadFile (in: hFile=0x1e8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x554, lpOverlapped=0x0) returned 1
	[0050.503] WriteFile (in: hFile=0x1bc, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x560, lpOverlapped=0x0) returned 1
	[0050.504] ReadFile (in: hFile=0x1e8, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.504] WriteFile (in: hFile=0x1bc, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0050.504] SetEndOfFile (hFile=0x1bc) returned 1
	[0050.504] CloseHandle (hObject=0x1bc) returned 1
	[0050.504] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.504] SetEndOfFile (hFile=0x1e8) returned 1
	[0050.505] CloseHandle (hObject=0x1e8) returned 1
	[0050.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.506] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif")) returned 1
	[0050.506] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75
	[0050.506] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75
	[0050.506] lstrlenW (lpString=".doc") returned 4
	[0050.506] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.506] lstrlenW (lpString=".docx") returned 5
	[0050.506] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.506] lstrlenW (lpString=".pdf") returned 4
	[0050.506] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.506] lstrlenW (lpString=".xls") returned 4
	[0050.506] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.506] lstrlenW (lpString=".xlsx") returned 5
	[0050.506] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.506] lstrlenW (lpString=".ppt") returned 4
	[0050.506] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.506] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75
	[0050.506] lstrlenW (lpString=".zip") returned 4
	[0050.506] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.506] lstrlenW (lpString=".rar") returned 4
	[0050.506] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.506] lstrlenW (lpString=".bz2") returned 4
	[0050.506] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.506] lstrlenW (lpString=".7z") returned 3
	[0050.507] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.507] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75
	[0050.507] lstrlenW (lpString=".dbf") returned 4
	[0050.507] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.507] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75
	[0050.507] lstrlenW (lpString=".1cd") returned 4
	[0050.507] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.507] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75
	[0050.507] lstrlenW (lpString=".jpg") returned 4
	[0050.507] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.507] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75
	[0050.507] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75
	[0050.507] lstrlenW (lpString=".doc") returned 4
	[0050.507] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.507] lstrlenW (lpString=".docx") returned 5
	[0050.507] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.507] lstrlenW (lpString=".pdf") returned 4
	[0050.507] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.507] lstrlenW (lpString=".xls") returned 4
	[0050.507] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.507] lstrlenW (lpString=".xlsx") returned 5
	[0050.507] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.507] lstrlenW (lpString=".ppt") returned 4
	[0050.507] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.507] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75
	[0050.507] lstrlenW (lpString=".zip") returned 4
	[0050.508] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.508] lstrlenW (lpString=".rar") returned 4
	[0050.508] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.508] lstrlenW (lpString=".bz2") returned 4
	[0050.508] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.508] lstrlenW (lpString=".7z") returned 3
	[0050.508] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75
	[0050.508] lstrlenW (lpString=".dbf") returned 4
	[0050.508] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75
	[0050.508] lstrlenW (lpString=".1cd") returned 4
	[0050.508] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF") returned 75
	[0050.508] lstrlenW (lpString=".jpg") returned 4
	[0050.508] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.508] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0050.508] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0050.508] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0050.537] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=37440) returned 1
	[0050.537] CloseHandle (hObject=0x1ac) returned 1
	[0050.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png")) returned 0x20
	[0050.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.538] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0050.538] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.538] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.538] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0050.538] GetLastError () returned 0x0
	[0050.538] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x9240, lpOverlapped=0x0) returned 1
	[0050.566] WriteFile (in: hFile=0x1e8, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x9250, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x9250, lpOverlapped=0x0) returned 1
	[0050.568] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.568] WriteFile (in: hFile=0x1e8, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0050.568] SetEndOfFile (hFile=0x1e8) returned 1
	[0050.568] CloseHandle (hObject=0x1e8) returned 1
	[0050.568] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.568] SetEndOfFile (hFile=0x1ac) returned 1
	[0050.569] CloseHandle (hObject=0x1ac) returned 1
	[0050.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.570] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png")) returned 1
	[0050.570] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76
	[0050.570] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76
	[0050.570] lstrlenW (lpString=".doc") returned 4
	[0050.570] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.570] lstrlenW (lpString=".docx") returned 5
	[0050.570] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.570] lstrlenW (lpString=".pdf") returned 4
	[0050.570] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.570] lstrlenW (lpString=".xls") returned 4
	[0050.570] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.570] lstrlenW (lpString=".xlsx") returned 5
	[0050.570] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.570] lstrlenW (lpString=".ppt") returned 4
	[0050.570] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.570] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76
	[0050.570] lstrlenW (lpString=".zip") returned 4
	[0050.570] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.570] lstrlenW (lpString=".rar") returned 4
	[0050.570] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.570] lstrlenW (lpString=".bz2") returned 4
	[0050.570] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.570] lstrlenW (lpString=".7z") returned 3
	[0050.570] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.570] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76
	[0050.570] lstrlenW (lpString=".dbf") returned 4
	[0050.570] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.571] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76
	[0050.571] lstrlenW (lpString=".1cd") returned 4
	[0050.571] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.571] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76
	[0050.571] lstrlenW (lpString=".jpg") returned 4
	[0050.571] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.571] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76
	[0050.571] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76
	[0050.571] lstrlenW (lpString=".doc") returned 4
	[0050.571] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.571] lstrlenW (lpString=".docx") returned 5
	[0050.571] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.571] lstrlenW (lpString=".pdf") returned 4
	[0050.571] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.571] lstrlenW (lpString=".xls") returned 4
	[0050.571] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.571] lstrlenW (lpString=".xlsx") returned 5
	[0050.571] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.571] lstrlenW (lpString=".ppt") returned 4
	[0050.571] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.571] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76
	[0050.571] lstrlenW (lpString=".zip") returned 4
	[0050.571] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.571] lstrlenW (lpString=".rar") returned 4
	[0050.571] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.571] lstrlenW (lpString=".bz2") returned 4
	[0050.571] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.571] lstrlenW (lpString=".7z") returned 3
	[0050.571] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.571] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76
	[0050.571] lstrlenW (lpString=".dbf") returned 4
	[0050.572] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.572] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76
	[0050.572] lstrlenW (lpString=".1cd") returned 4
	[0050.572] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.572] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG") returned 76
	[0050.572] lstrlenW (lpString=".jpg") returned 4
	[0050.572] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.572] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0050.572] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0050.572] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0050.572] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1439) returned 1
	[0050.572] CloseHandle (hObject=0x1ac) returned 1
	[0050.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif")) returned 0x20
	[0050.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.573] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0050.573] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.573] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.573] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0050.577] GetLastError () returned 0x0
	[0050.577] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x59f, lpOverlapped=0x0) returned 1
	[0050.586] WriteFile (in: hFile=0x1dc, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x5a0, lpOverlapped=0x0) returned 1
	[0050.587] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.587] WriteFile (in: hFile=0x1dc, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0050.587] SetEndOfFile (hFile=0x1dc) returned 1
	[0050.587] CloseHandle (hObject=0x1dc) returned 1
	[0050.587] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.587] SetEndOfFile (hFile=0x1ac) returned 1
	[0050.588] CloseHandle (hObject=0x1ac) returned 1
	[0050.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.588] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif")) returned 1
	[0050.588] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72
	[0050.588] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72
	[0050.588] lstrlenW (lpString=".doc") returned 4
	[0050.588] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.588] lstrlenW (lpString=".docx") returned 5
	[0050.588] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.588] lstrlenW (lpString=".pdf") returned 4
	[0050.589] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.589] lstrlenW (lpString=".xls") returned 4
	[0050.589] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.589] lstrlenW (lpString=".xlsx") returned 5
	[0050.589] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.589] lstrlenW (lpString=".ppt") returned 4
	[0050.589] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.589] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72
	[0050.589] lstrlenW (lpString=".zip") returned 4
	[0050.589] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.589] lstrlenW (lpString=".rar") returned 4
	[0050.589] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.589] lstrlenW (lpString=".bz2") returned 4
	[0050.589] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.589] lstrlenW (lpString=".7z") returned 3
	[0050.589] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.589] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72
	[0050.589] lstrlenW (lpString=".dbf") returned 4
	[0050.589] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.589] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72
	[0050.589] lstrlenW (lpString=".1cd") returned 4
	[0050.589] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.589] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72
	[0050.589] lstrlenW (lpString=".jpg") returned 4
	[0050.589] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.589] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72
	[0050.590] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72
	[0050.590] lstrlenW (lpString=".doc") returned 4
	[0050.590] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.590] lstrlenW (lpString=".docx") returned 5
	[0050.590] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.590] lstrlenW (lpString=".pdf") returned 4
	[0050.590] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.590] lstrlenW (lpString=".xls") returned 4
	[0050.590] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.590] lstrlenW (lpString=".xlsx") returned 5
	[0050.590] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.590] lstrlenW (lpString=".ppt") returned 4
	[0050.590] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.590] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72
	[0050.590] lstrlenW (lpString=".zip") returned 4
	[0050.590] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.590] lstrlenW (lpString=".rar") returned 4
	[0050.590] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.590] lstrlenW (lpString=".bz2") returned 4
	[0050.590] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.590] lstrlenW (lpString=".7z") returned 3
	[0050.590] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.590] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72
	[0050.590] lstrlenW (lpString=".dbf") returned 4
	[0050.590] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.590] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72
	[0050.590] lstrlenW (lpString=".1cd") returned 4
	[0050.590] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.590] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF") returned 72
	[0050.590] lstrlenW (lpString=".jpg") returned 4
	[0050.590] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.591] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0050.591] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0050.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0050.591] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=37112) returned 1
	[0050.591] CloseHandle (hObject=0x1ac) returned 1
	[0050.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png")) returned 0x20
	[0050.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0050.591] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.591] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0050.592] GetLastError () returned 0x0
	[0050.592] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x90f8, lpOverlapped=0x0) returned 1
	[0050.615] WriteFile (in: hFile=0x1dc, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x9100, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x9100, lpOverlapped=0x0) returned 1
	[0050.616] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.616] WriteFile (in: hFile=0x1dc, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0050.616] SetEndOfFile (hFile=0x1dc) returned 1
	[0050.616] CloseHandle (hObject=0x1dc) returned 1
	[0050.617] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.617] SetEndOfFile (hFile=0x1ac) returned 1
	[0050.618] CloseHandle (hObject=0x1ac) returned 1
	[0050.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.618] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png")) returned 1
	[0050.618] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73
	[0050.618] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73
	[0050.618] lstrlenW (lpString=".doc") returned 4
	[0050.618] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.618] lstrlenW (lpString=".docx") returned 5
	[0050.618] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.618] lstrlenW (lpString=".pdf") returned 4
	[0050.618] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.618] lstrlenW (lpString=".xls") returned 4
	[0050.618] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.618] lstrlenW (lpString=".xlsx") returned 5
	[0050.618] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.618] lstrlenW (lpString=".ppt") returned 4
	[0050.618] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.618] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73
	[0050.618] lstrlenW (lpString=".zip") returned 4
	[0050.619] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.619] lstrlenW (lpString=".rar") returned 4
	[0050.619] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.619] lstrlenW (lpString=".bz2") returned 4
	[0050.619] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.619] lstrlenW (lpString=".7z") returned 3
	[0050.619] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.619] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73
	[0050.619] lstrlenW (lpString=".dbf") returned 4
	[0050.619] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.619] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73
	[0050.619] lstrlenW (lpString=".1cd") returned 4
	[0050.619] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.619] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73
	[0050.619] lstrlenW (lpString=".jpg") returned 4
	[0050.619] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.619] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73
	[0050.619] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73
	[0050.619] lstrlenW (lpString=".doc") returned 4
	[0050.619] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.619] lstrlenW (lpString=".docx") returned 5
	[0050.619] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.619] lstrlenW (lpString=".pdf") returned 4
	[0050.619] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.619] lstrlenW (lpString=".xls") returned 4
	[0050.619] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.619] lstrlenW (lpString=".xlsx") returned 5
	[0050.619] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.619] lstrlenW (lpString=".ppt") returned 4
	[0050.619] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.619] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73
	[0050.620] lstrlenW (lpString=".zip") returned 4
	[0050.620] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.620] lstrlenW (lpString=".rar") returned 4
	[0050.620] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.620] lstrlenW (lpString=".bz2") returned 4
	[0050.620] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.620] lstrlenW (lpString=".7z") returned 3
	[0050.620] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.620] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73
	[0050.620] lstrlenW (lpString=".dbf") returned 4
	[0050.620] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.620] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73
	[0050.620] lstrlenW (lpString=".1cd") returned 4
	[0050.620] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.620] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG") returned 73
	[0050.620] lstrlenW (lpString=".jpg") returned 4
	[0050.620] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.620] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0050.620] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0050.620] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0050.621] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1666) returned 1
	[0050.621] CloseHandle (hObject=0x1ac) returned 1
	[0050.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif")) returned 0x20
	[0050.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.621] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0050.622] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.622] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.622] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0051.220] GetLastError () returned 0x0
	[0051.221] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x682, lpOverlapped=0x0) returned 1
	[0051.398] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x690, lpOverlapped=0x0) returned 1
	[0051.399] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.399] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0051.399] SetEndOfFile (hFile=0x194) returned 1
	[0051.399] CloseHandle (hObject=0x194) returned 1
	[0051.399] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.399] SetEndOfFile (hFile=0x1ac) returned 1
	[0051.400] CloseHandle (hObject=0x1ac) returned 1
	[0051.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.401] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif")) returned 1
	[0051.401] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74
	[0051.401] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74
	[0051.401] lstrlenW (lpString=".doc") returned 4
	[0051.401] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.401] lstrlenW (lpString=".docx") returned 5
	[0051.401] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.401] lstrlenW (lpString=".pdf") returned 4
	[0051.401] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.401] lstrlenW (lpString=".xls") returned 4
	[0051.401] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.401] lstrlenW (lpString=".xlsx") returned 5
	[0051.401] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.401] lstrlenW (lpString=".ppt") returned 4
	[0051.402] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74
	[0051.402] lstrlenW (lpString=".zip") returned 4
	[0051.402] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.402] lstrlenW (lpString=".rar") returned 4
	[0051.402] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.402] lstrlenW (lpString=".bz2") returned 4
	[0051.402] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.402] lstrlenW (lpString=".7z") returned 3
	[0051.402] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74
	[0051.402] lstrlenW (lpString=".dbf") returned 4
	[0051.402] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74
	[0051.402] lstrlenW (lpString=".1cd") returned 4
	[0051.402] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74
	[0051.402] lstrlenW (lpString=".jpg") returned 4
	[0051.402] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74
	[0051.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74
	[0051.402] lstrlenW (lpString=".doc") returned 4
	[0051.402] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.402] lstrlenW (lpString=".docx") returned 5
	[0051.402] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.402] lstrlenW (lpString=".pdf") returned 4
	[0051.402] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.402] lstrlenW (lpString=".xls") returned 4
	[0051.402] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.402] lstrlenW (lpString=".xlsx") returned 5
	[0051.403] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.403] lstrlenW (lpString=".ppt") returned 4
	[0051.403] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74
	[0051.403] lstrlenW (lpString=".zip") returned 4
	[0051.403] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.403] lstrlenW (lpString=".rar") returned 4
	[0051.403] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.403] lstrlenW (lpString=".bz2") returned 4
	[0051.403] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.403] lstrlenW (lpString=".7z") returned 3
	[0051.403] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74
	[0051.403] lstrlenW (lpString=".dbf") returned 4
	[0051.403] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74
	[0051.403] lstrlenW (lpString=".1cd") returned 4
	[0051.403] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF") returned 74
	[0051.403] lstrlenW (lpString=".jpg") returned 4
	[0051.403] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.403] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0051.404] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0051.404] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0051.404] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=3970) returned 1
	[0051.404] CloseHandle (hObject=0x1ac) returned 1
	[0051.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif")) returned 0x20
	[0051.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.404] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0051.404] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.404] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.404] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0051.594] GetLastError () returned 0x0
	[0051.594] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xf82, lpOverlapped=0x0) returned 1
	[0051.631] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xf90, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xf90, lpOverlapped=0x0) returned 1
	[0051.632] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.632] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0051.632] SetEndOfFile (hFile=0x194) returned 1
	[0051.632] CloseHandle (hObject=0x194) returned 1
	[0051.633] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.633] SetEndOfFile (hFile=0x1ac) returned 1
	[0051.633] CloseHandle (hObject=0x1ac) returned 1
	[0051.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.634] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif")) returned 1
	[0051.634] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76
	[0051.634] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76
	[0051.634] lstrlenW (lpString=".doc") returned 4
	[0051.634] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.634] lstrlenW (lpString=".docx") returned 5
	[0051.634] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.634] lstrlenW (lpString=".pdf") returned 4
	[0051.634] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.634] lstrlenW (lpString=".xls") returned 4
	[0051.634] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.634] lstrlenW (lpString=".xlsx") returned 5
	[0051.634] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.634] lstrlenW (lpString=".ppt") returned 4
	[0051.634] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.634] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76
	[0051.634] lstrlenW (lpString=".zip") returned 4
	[0051.634] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.634] lstrlenW (lpString=".rar") returned 4
	[0051.634] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.634] lstrlenW (lpString=".bz2") returned 4
	[0051.635] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.635] lstrlenW (lpString=".7z") returned 3
	[0051.635] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76
	[0051.635] lstrlenW (lpString=".dbf") returned 4
	[0051.635] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76
	[0051.635] lstrlenW (lpString=".1cd") returned 4
	[0051.635] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76
	[0051.635] lstrlenW (lpString=".jpg") returned 4
	[0051.635] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76
	[0051.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76
	[0051.635] lstrlenW (lpString=".doc") returned 4
	[0051.635] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.635] lstrlenW (lpString=".docx") returned 5
	[0051.635] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.635] lstrlenW (lpString=".pdf") returned 4
	[0051.635] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.635] lstrlenW (lpString=".xls") returned 4
	[0051.635] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.635] lstrlenW (lpString=".xlsx") returned 5
	[0051.635] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.635] lstrlenW (lpString=".ppt") returned 4
	[0051.635] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76
	[0051.635] lstrlenW (lpString=".zip") returned 4
	[0051.635] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.635] lstrlenW (lpString=".rar") returned 4
	[0051.635] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.635] lstrlenW (lpString=".bz2") returned 4
	[0051.636] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.636] lstrlenW (lpString=".7z") returned 3
	[0051.636] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76
	[0051.636] lstrlenW (lpString=".dbf") returned 4
	[0051.636] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76
	[0051.636] lstrlenW (lpString=".1cd") returned 4
	[0051.636] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF") returned 76
	[0051.636] lstrlenW (lpString=".jpg") returned 4
	[0051.636] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.636] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0051.636] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0051.636] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0051.637] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=3611) returned 1
	[0051.637] CloseHandle (hObject=0x1ac) returned 1
	[0051.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif")) returned 0x20
	[0051.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.637] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0051.637] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.637] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.637] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0051.641] GetLastError () returned 0x0
	[0051.642] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xe1b, lpOverlapped=0x0) returned 1
	[0051.644] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe20, lpOverlapped=0x0) returned 1
	[0051.644] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.645] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0051.645] SetEndOfFile (hFile=0x194) returned 1
	[0051.645] CloseHandle (hObject=0x194) returned 1
	[0051.645] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.645] SetEndOfFile (hFile=0x1ac) returned 1
	[0051.646] CloseHandle (hObject=0x1ac) returned 1
	[0051.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.646] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif")) returned 1
	[0051.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73
	[0051.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73
	[0051.646] lstrlenW (lpString=".doc") returned 4
	[0051.646] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.646] lstrlenW (lpString=".docx") returned 5
	[0051.646] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.646] lstrlenW (lpString=".pdf") returned 4
	[0051.646] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.647] lstrlenW (lpString=".xls") returned 4
	[0051.647] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.647] lstrlenW (lpString=".xlsx") returned 5
	[0051.647] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.647] lstrlenW (lpString=".ppt") returned 4
	[0051.647] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.647] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73
	[0051.647] lstrlenW (lpString=".zip") returned 4
	[0051.647] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.647] lstrlenW (lpString=".rar") returned 4
	[0051.647] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.647] lstrlenW (lpString=".bz2") returned 4
	[0051.647] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.647] lstrlenW (lpString=".7z") returned 3
	[0051.647] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.647] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73
	[0051.647] lstrlenW (lpString=".dbf") returned 4
	[0051.647] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.647] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73
	[0051.647] lstrlenW (lpString=".1cd") returned 4
	[0051.647] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.647] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73
	[0051.647] lstrlenW (lpString=".jpg") returned 4
	[0051.647] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.647] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73
	[0051.647] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73
	[0051.647] lstrlenW (lpString=".doc") returned 4
	[0051.647] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.647] lstrlenW (lpString=".docx") returned 5
	[0051.647] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.648] lstrlenW (lpString=".pdf") returned 4
	[0051.648] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.648] lstrlenW (lpString=".xls") returned 4
	[0051.648] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.648] lstrlenW (lpString=".xlsx") returned 5
	[0051.648] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.648] lstrlenW (lpString=".ppt") returned 4
	[0051.648] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.648] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73
	[0051.648] lstrlenW (lpString=".zip") returned 4
	[0051.648] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.648] lstrlenW (lpString=".rar") returned 4
	[0051.648] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.648] lstrlenW (lpString=".bz2") returned 4
	[0051.648] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.648] lstrlenW (lpString=".7z") returned 3
	[0051.648] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.648] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73
	[0051.648] lstrlenW (lpString=".dbf") returned 4
	[0051.648] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.648] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73
	[0051.648] lstrlenW (lpString=".1cd") returned 4
	[0051.648] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.648] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF") returned 73
	[0051.648] lstrlenW (lpString=".jpg") returned 4
	[0051.648] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.648] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0051.648] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0051.649] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0051.649] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=34163) returned 1
	[0051.649] CloseHandle (hObject=0x1ac) returned 1
	[0051.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png")) returned 0x20
	[0051.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.649] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0051.649] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.649] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.649] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0051.650] GetLastError () returned 0x0
	[0051.650] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x8573, lpOverlapped=0x0) returned 1
	[0051.663] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x8580, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x8580, lpOverlapped=0x0) returned 1
	[0051.664] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.664] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0051.664] SetEndOfFile (hFile=0x194) returned 1
	[0051.665] CloseHandle (hObject=0x194) returned 1
	[0051.665] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.665] SetEndOfFile (hFile=0x1ac) returned 1
	[0051.666] CloseHandle (hObject=0x1ac) returned 1
	[0051.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.666] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png")) returned 1
	[0051.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74
	[0051.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74
	[0051.666] lstrlenW (lpString=".doc") returned 4
	[0051.666] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.666] lstrlenW (lpString=".docx") returned 5
	[0051.666] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.666] lstrlenW (lpString=".pdf") returned 4
	[0051.666] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.667] lstrlenW (lpString=".xls") returned 4
	[0051.667] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.667] lstrlenW (lpString=".xlsx") returned 5
	[0051.667] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.667] lstrlenW (lpString=".ppt") returned 4
	[0051.667] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74
	[0051.667] lstrlenW (lpString=".zip") returned 4
	[0051.667] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.667] lstrlenW (lpString=".rar") returned 4
	[0051.667] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.667] lstrlenW (lpString=".bz2") returned 4
	[0051.667] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.667] lstrlenW (lpString=".7z") returned 3
	[0051.667] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74
	[0051.667] lstrlenW (lpString=".dbf") returned 4
	[0051.667] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74
	[0051.667] lstrlenW (lpString=".1cd") returned 4
	[0051.667] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74
	[0051.667] lstrlenW (lpString=".jpg") returned 4
	[0051.667] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74
	[0051.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74
	[0051.667] lstrlenW (lpString=".doc") returned 4
	[0051.667] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.667] lstrlenW (lpString=".docx") returned 5
	[0051.667] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.667] lstrlenW (lpString=".pdf") returned 4
	[0051.667] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.668] lstrlenW (lpString=".xls") returned 4
	[0051.668] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.668] lstrlenW (lpString=".xlsx") returned 5
	[0051.668] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.668] lstrlenW (lpString=".ppt") returned 4
	[0051.668] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74
	[0051.668] lstrlenW (lpString=".zip") returned 4
	[0051.668] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.668] lstrlenW (lpString=".rar") returned 4
	[0051.668] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.668] lstrlenW (lpString=".bz2") returned 4
	[0051.668] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.668] lstrlenW (lpString=".7z") returned 3
	[0051.668] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74
	[0051.668] lstrlenW (lpString=".dbf") returned 4
	[0051.668] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74
	[0051.668] lstrlenW (lpString=".1cd") returned 4
	[0051.668] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG") returned 74
	[0051.668] lstrlenW (lpString=".jpg") returned 4
	[0051.668] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.668] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0051.668] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0051.668] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0051.669] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=937) returned 1
	[0051.669] CloseHandle (hObject=0x1ac) returned 1
	[0051.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif")) returned 0x20
	[0051.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.669] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0051.669] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.669] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.669] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0051.674] GetLastError () returned 0x0
	[0051.674] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x3a9, lpOverlapped=0x0) returned 1
	[0051.675] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x3b0, lpOverlapped=0x0) returned 1
	[0051.676] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.676] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0051.676] SetEndOfFile (hFile=0x194) returned 1
	[0051.677] CloseHandle (hObject=0x194) returned 1
	[0051.677] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.677] SetEndOfFile (hFile=0x1ac) returned 1
	[0051.678] CloseHandle (hObject=0x1ac) returned 1
	[0051.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.678] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif")) returned 1
	[0051.678] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71
	[0051.678] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71
	[0051.678] lstrlenW (lpString=".doc") returned 4
	[0051.678] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.678] lstrlenW (lpString=".docx") returned 5
	[0051.678] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.678] lstrlenW (lpString=".pdf") returned 4
	[0051.678] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.678] lstrlenW (lpString=".xls") returned 4
	[0051.678] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.678] lstrlenW (lpString=".xlsx") returned 5
	[0051.678] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.678] lstrlenW (lpString=".ppt") returned 4
	[0051.678] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.678] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71
	[0051.678] lstrlenW (lpString=".zip") returned 4
	[0051.678] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.678] lstrlenW (lpString=".rar") returned 4
	[0051.679] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.679] lstrlenW (lpString=".bz2") returned 4
	[0051.679] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.679] lstrlenW (lpString=".7z") returned 3
	[0051.679] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71
	[0051.679] lstrlenW (lpString=".dbf") returned 4
	[0051.679] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71
	[0051.679] lstrlenW (lpString=".1cd") returned 4
	[0051.679] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71
	[0051.679] lstrlenW (lpString=".jpg") returned 4
	[0051.679] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71
	[0051.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71
	[0051.679] lstrlenW (lpString=".doc") returned 4
	[0051.679] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.679] lstrlenW (lpString=".docx") returned 5
	[0051.679] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.679] lstrlenW (lpString=".pdf") returned 4
	[0051.679] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.679] lstrlenW (lpString=".xls") returned 4
	[0051.679] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.679] lstrlenW (lpString=".xlsx") returned 5
	[0051.679] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.679] lstrlenW (lpString=".ppt") returned 4
	[0051.679] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71
	[0051.679] lstrlenW (lpString=".zip") returned 4
	[0051.679] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.679] lstrlenW (lpString=".rar") returned 4
	[0051.680] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.680] lstrlenW (lpString=".bz2") returned 4
	[0051.680] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.680] lstrlenW (lpString=".7z") returned 3
	[0051.680] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71
	[0051.680] lstrlenW (lpString=".dbf") returned 4
	[0051.680] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71
	[0051.680] lstrlenW (lpString=".1cd") returned 4
	[0051.680] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF") returned 71
	[0051.680] lstrlenW (lpString=".jpg") returned 4
	[0051.680] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.680] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0051.680] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0051.680] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0051.680] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=29305) returned 1
	[0051.680] CloseHandle (hObject=0x1ac) returned 1
	[0051.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png")) returned 0x20
	[0051.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.681] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0051.681] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.681] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.681] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0051.682] GetLastError () returned 0x0
	[0051.682] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x7279, lpOverlapped=0x0) returned 1
	[0051.707] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x7280, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x7280, lpOverlapped=0x0) returned 1
	[0051.709] ReadFile (in: hFile=0x1ac, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.709] WriteFile (in: hFile=0x194, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0051.709] SetEndOfFile (hFile=0x194) returned 1
	[0051.709] CloseHandle (hObject=0x194) returned 1
	[0051.709] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.710] SetEndOfFile (hFile=0x1ac) returned 1
	[0051.710] CloseHandle (hObject=0x1ac) returned 1
	[0051.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.711] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png")) returned 1
	[0051.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72
	[0051.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72
	[0051.711] lstrlenW (lpString=".doc") returned 4
	[0051.711] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.711] lstrlenW (lpString=".docx") returned 5
	[0051.711] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.711] lstrlenW (lpString=".pdf") returned 4
	[0051.711] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.711] lstrlenW (lpString=".xls") returned 4
	[0051.711] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.711] lstrlenW (lpString=".xlsx") returned 5
	[0051.711] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.711] lstrlenW (lpString=".ppt") returned 4
	[0051.711] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72
	[0051.711] lstrlenW (lpString=".zip") returned 4
	[0051.711] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.712] lstrlenW (lpString=".rar") returned 4
	[0051.712] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.712] lstrlenW (lpString=".bz2") returned 4
	[0051.712] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.712] lstrlenW (lpString=".7z") returned 3
	[0051.712] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72
	[0051.712] lstrlenW (lpString=".dbf") returned 4
	[0051.712] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72
	[0051.712] lstrlenW (lpString=".1cd") returned 4
	[0051.712] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72
	[0051.712] lstrlenW (lpString=".jpg") returned 4
	[0051.712] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72
	[0051.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72
	[0051.712] lstrlenW (lpString=".doc") returned 4
	[0051.712] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.712] lstrlenW (lpString=".docx") returned 5
	[0051.712] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.712] lstrlenW (lpString=".pdf") returned 4
	[0051.712] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.712] lstrlenW (lpString=".xls") returned 4
	[0051.712] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.712] lstrlenW (lpString=".xlsx") returned 5
	[0051.712] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.712] lstrlenW (lpString=".ppt") returned 4
	[0051.712] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72
	[0051.712] lstrlenW (lpString=".zip") returned 4
	[0051.712] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.713] lstrlenW (lpString=".rar") returned 4
	[0051.713] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.713] lstrlenW (lpString=".bz2") returned 4
	[0051.713] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.713] lstrlenW (lpString=".7z") returned 3
	[0051.713] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72
	[0051.713] lstrlenW (lpString=".dbf") returned 4
	[0051.713] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72
	[0051.713] lstrlenW (lpString=".1cd") returned 4
	[0051.713] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG") returned 72
	[0051.713] lstrlenW (lpString=".jpg") returned 4
	[0051.713] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.713] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0051.713] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0051.713] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0052.077] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1009) returned 1
	[0052.077] CloseHandle (hObject=0x1dc) returned 1
	[0052.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif")) returned 0x20
	[0052.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.078] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0052.078] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.078] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.078] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0052.598] GetLastError () returned 0x0
	[0052.598] ReadFile (in: hFile=0x1dc, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x3f1, lpOverlapped=0x0) returned 1
	[0052.600] WriteFile (in: hFile=0x214, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x400, lpOverlapped=0x0) returned 1
	[0052.601] ReadFile (in: hFile=0x1dc, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.601] WriteFile (in: hFile=0x214, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0052.601] SetEndOfFile (hFile=0x214) returned 1
	[0052.601] CloseHandle (hObject=0x214) returned 1
	[0052.602] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.602] SetEndOfFile (hFile=0x1dc) returned 1
	[0052.602] CloseHandle (hObject=0x1dc) returned 1
	[0052.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.603] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif")) returned 1
	[0052.603] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73
	[0052.603] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73
	[0052.603] lstrlenW (lpString=".doc") returned 4
	[0052.603] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0052.603] lstrlenW (lpString=".docx") returned 5
	[0052.603] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0052.603] lstrlenW (lpString=".pdf") returned 4
	[0052.603] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0052.603] lstrlenW (lpString=".xls") returned 4
	[0052.603] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0052.603] lstrlenW (lpString=".xlsx") returned 5
	[0052.603] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0052.603] lstrlenW (lpString=".ppt") returned 4
	[0052.603] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0052.603] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73
	[0052.603] lstrlenW (lpString=".zip") returned 4
	[0052.603] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0052.603] lstrlenW (lpString=".rar") returned 4
	[0052.603] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0052.603] lstrlenW (lpString=".bz2") returned 4
	[0052.603] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0052.603] lstrlenW (lpString=".7z") returned 3
	[0052.604] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0052.604] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73
	[0052.604] lstrlenW (lpString=".dbf") returned 4
	[0052.604] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0052.604] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73
	[0052.604] lstrlenW (lpString=".1cd") returned 4
	[0052.604] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0052.604] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73
	[0052.604] lstrlenW (lpString=".jpg") returned 4
	[0052.604] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0052.604] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73
	[0052.604] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73
	[0052.604] lstrlenW (lpString=".doc") returned 4
	[0052.604] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0052.604] lstrlenW (lpString=".docx") returned 5
	[0052.604] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0052.604] lstrlenW (lpString=".pdf") returned 4
	[0052.604] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0052.604] lstrlenW (lpString=".xls") returned 4
	[0052.604] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0052.604] lstrlenW (lpString=".xlsx") returned 5
	[0052.604] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0052.604] lstrlenW (lpString=".ppt") returned 4
	[0052.604] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0052.604] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73
	[0052.604] lstrlenW (lpString=".zip") returned 4
	[0052.604] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0052.604] lstrlenW (lpString=".rar") returned 4
	[0052.604] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0052.604] lstrlenW (lpString=".bz2") returned 4
	[0052.604] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0052.605] lstrlenW (lpString=".7z") returned 3
	[0052.605] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0052.605] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73
	[0052.605] lstrlenW (lpString=".dbf") returned 4
	[0052.605] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0052.605] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73
	[0052.605] lstrlenW (lpString=".1cd") returned 4
	[0052.605] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0052.605] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF") returned 73
	[0052.605] lstrlenW (lpString=".jpg") returned 4
	[0052.605] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0052.605] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0052.605] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0052.605] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0052.623] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1571) returned 1
	[0052.623] CloseHandle (hObject=0x220) returned 1
	[0052.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif")) returned 0x20
	[0052.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.623] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0052.623] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.623] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.623] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0052.625] GetLastError () returned 0x0
	[0052.625] ReadFile (in: hFile=0x220, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x623, lpOverlapped=0x0) returned 1
	[0052.627] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x630, lpOverlapped=0x0) returned 1
	[0052.628] ReadFile (in: hFile=0x220, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.628] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0052.628] SetEndOfFile (hFile=0x1e0) returned 1
	[0052.628] CloseHandle (hObject=0x1e0) returned 1
	[0052.628] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.628] SetEndOfFile (hFile=0x220) returned 1
	[0052.629] CloseHandle (hObject=0x220) returned 1
	[0052.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.629] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif")) returned 1
	[0052.629] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76
	[0052.629] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76
	[0052.629] lstrlenW (lpString=".doc") returned 4
	[0052.629] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0052.629] lstrlenW (lpString=".docx") returned 5
	[0052.629] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0052.629] lstrlenW (lpString=".pdf") returned 4
	[0052.629] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0052.629] lstrlenW (lpString=".xls") returned 4
	[0052.629] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0052.629] lstrlenW (lpString=".xlsx") returned 5
	[0052.630] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0052.630] lstrlenW (lpString=".ppt") returned 4
	[0052.630] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0052.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76
	[0052.630] lstrlenW (lpString=".zip") returned 4
	[0052.630] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0052.630] lstrlenW (lpString=".rar") returned 4
	[0052.630] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0052.630] lstrlenW (lpString=".bz2") returned 4
	[0052.630] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0052.630] lstrlenW (lpString=".7z") returned 3
	[0052.630] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0052.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76
	[0052.630] lstrlenW (lpString=".dbf") returned 4
	[0052.630] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0052.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76
	[0052.630] lstrlenW (lpString=".1cd") returned 4
	[0052.630] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0052.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76
	[0052.630] lstrlenW (lpString=".jpg") returned 4
	[0052.630] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0052.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76
	[0052.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76
	[0052.630] lstrlenW (lpString=".doc") returned 4
	[0052.630] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0052.630] lstrlenW (lpString=".docx") returned 5
	[0052.630] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0052.630] lstrlenW (lpString=".pdf") returned 4
	[0052.630] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0052.630] lstrlenW (lpString=".xls") returned 4
	[0052.630] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0052.630] lstrlenW (lpString=".xlsx") returned 5
	[0052.631] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0052.631] lstrlenW (lpString=".ppt") returned 4
	[0052.631] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0052.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76
	[0052.631] lstrlenW (lpString=".zip") returned 4
	[0052.631] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0052.631] lstrlenW (lpString=".rar") returned 4
	[0052.631] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0052.631] lstrlenW (lpString=".bz2") returned 4
	[0052.631] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0052.631] lstrlenW (lpString=".7z") returned 3
	[0052.631] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0052.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76
	[0052.631] lstrlenW (lpString=".dbf") returned 4
	[0052.631] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0052.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76
	[0052.631] lstrlenW (lpString=".1cd") returned 4
	[0052.631] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0052.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF") returned 76
	[0052.631] lstrlenW (lpString=".jpg") returned 4
	[0052.631] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0052.631] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0052.631] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0052.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0052.632] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=30170) returned 1
	[0052.632] CloseHandle (hObject=0x220) returned 1
	[0052.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png")) returned 0x20
	[0052.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.633] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0052.633] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.633] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.633] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0052.633] GetLastError () returned 0x0
	[0052.633] ReadFile (in: hFile=0x220, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x75da, lpOverlapped=0x0) returned 1
	[0052.666] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x75e0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x75e0, lpOverlapped=0x0) returned 1
	[0052.667] ReadFile (in: hFile=0x220, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.667] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0052.668] SetEndOfFile (hFile=0x1e0) returned 1
	[0052.668] CloseHandle (hObject=0x1e0) returned 1
	[0052.668] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.668] SetEndOfFile (hFile=0x220) returned 1
	[0052.669] CloseHandle (hObject=0x220) returned 1
	[0052.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.669] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png")) returned 1
	[0052.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77
	[0052.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77
	[0052.669] lstrlenW (lpString=".doc") returned 4
	[0052.669] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.669] lstrlenW (lpString=".docx") returned 5
	[0052.669] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.669] lstrlenW (lpString=".pdf") returned 4
	[0052.669] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.669] lstrlenW (lpString=".xls") returned 4
	[0052.669] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.669] lstrlenW (lpString=".xlsx") returned 5
	[0052.670] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.670] lstrlenW (lpString=".ppt") returned 4
	[0052.670] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77
	[0052.670] lstrlenW (lpString=".zip") returned 4
	[0052.670] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.670] lstrlenW (lpString=".rar") returned 4
	[0052.670] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.670] lstrlenW (lpString=".bz2") returned 4
	[0052.670] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.670] lstrlenW (lpString=".7z") returned 3
	[0052.670] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77
	[0052.670] lstrlenW (lpString=".dbf") returned 4
	[0052.670] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77
	[0052.670] lstrlenW (lpString=".1cd") returned 4
	[0052.670] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77
	[0052.670] lstrlenW (lpString=".jpg") returned 4
	[0052.670] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77
	[0052.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77
	[0052.670] lstrlenW (lpString=".doc") returned 4
	[0052.670] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.670] lstrlenW (lpString=".docx") returned 5
	[0052.670] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.670] lstrlenW (lpString=".pdf") returned 4
	[0052.670] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.670] lstrlenW (lpString=".xls") returned 4
	[0052.670] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.670] lstrlenW (lpString=".xlsx") returned 5
	[0052.670] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.671] lstrlenW (lpString=".ppt") returned 4
	[0052.671] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77
	[0052.671] lstrlenW (lpString=".zip") returned 4
	[0052.671] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.671] lstrlenW (lpString=".rar") returned 4
	[0052.671] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.671] lstrlenW (lpString=".bz2") returned 4
	[0052.671] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.671] lstrlenW (lpString=".7z") returned 3
	[0052.671] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77
	[0052.671] lstrlenW (lpString=".dbf") returned 4
	[0052.671] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77
	[0052.671] lstrlenW (lpString=".1cd") returned 4
	[0052.671] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG") returned 77
	[0052.671] lstrlenW (lpString=".jpg") returned 4
	[0052.671] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.671] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.672] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.672] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0052.672] GetLastError () returned 0x0
	[0052.672] ReadFile (in: hFile=0x220, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x1ac96, lpOverlapped=0x0) returned 1
	[0052.676] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x1aca0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x1aca0, lpOverlapped=0x0) returned 1
	[0052.678] ReadFile (in: hFile=0x220, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.679] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0052.679] SetEndOfFile (hFile=0x1e0) returned 1
	[0052.679] CloseHandle (hObject=0x1e0) returned 1
	[0052.679] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.679] SetEndOfFile (hFile=0x220) returned 1
	[0052.680] CloseHandle (hObject=0x220) returned 1
	[0052.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.681] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm")) returned 1
	[0052.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70
	[0052.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70
	[0052.681] lstrlenW (lpString=".doc") returned 4
	[0052.681] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0052.681] lstrlenW (lpString=".docx") returned 5
	[0052.681] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1
	[0052.681] lstrlenW (lpString=".pdf") returned 4
	[0052.681] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0052.681] lstrlenW (lpString=".xls") returned 4
	[0052.681] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0052.681] lstrlenW (lpString=".xlsx") returned 5
	[0052.681] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1
	[0052.681] lstrlenW (lpString=".ppt") returned 4
	[0052.681] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0052.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70
	[0052.681] lstrlenW (lpString=".zip") returned 4
	[0052.681] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0052.681] lstrlenW (lpString=".rar") returned 4
	[0052.681] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0052.681] lstrlenW (lpString=".bz2") returned 4
	[0052.681] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0052.681] lstrlenW (lpString=".7z") returned 3
	[0052.681] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0052.682] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70
	[0052.682] lstrlenW (lpString=".dbf") returned 4
	[0052.682] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0052.682] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70
	[0052.682] lstrlenW (lpString=".1cd") returned 4
	[0052.682] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0052.682] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM") returned 70
	[0052.682] lstrlenW (lpString=".jpg") returned 4
	[0052.682] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0052.683] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=72031) returned 1
	[0052.683] CloseHandle (hObject=0x220) returned 1
	[0052.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm")) returned 0x20
	[0052.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.683] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0052.683] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.683] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.683] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0052.684] GetLastError () returned 0x0
	[0052.684] ReadFile (in: hFile=0x220, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x1195f, lpOverlapped=0x0) returned 1
	[0052.688] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x11960, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x11960, lpOverlapped=0x0) returned 1
	[0052.690] ReadFile (in: hFile=0x220, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.690] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0052.690] SetEndOfFile (hFile=0x1e0) returned 1
	[0052.690] CloseHandle (hObject=0x1e0) returned 1
	[0052.690] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.690] SetEndOfFile (hFile=0x220) returned 1
	[0052.691] CloseHandle (hObject=0x220) returned 1
	[0052.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.692] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm")) returned 1
	[0052.692] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM") returned 73
	[0052.692] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM") returned 73
	[0052.692] lstrlenW (lpString=".doc") returned 4
	[0052.692] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0052.692] lstrlenW (lpString=".docx") returned 5
	[0052.692] lstrcmpiW (lpString1=".docx", lpString2="8.CHM") returned -1
	[0052.692] lstrlenW (lpString=".pdf") returned 4
	[0052.692] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0052.692] lstrlenW (lpString=".xls") returned 4
	[0052.692] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0052.692] lstrlenW (lpString=".xlsx") returned 5
	[0052.692] lstrcmpiW (lpString1=".xlsx", lpString2="8.CHM") returned -1
	[0052.692] lstrlenW (lpString=".ppt") returned 4
	[0052.692] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0052.692] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM") returned 73
	[0052.692] lstrlenW (lpString=".zip") returned 4
	[0052.692] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0052.692] lstrlenW (lpString=".rar") returned 4
	[0052.692] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0052.692] lstrlenW (lpString=".bz2") returned 4
	[0052.692] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0052.692] lstrlenW (lpString=".7z") returned 3
	[0052.693] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0052.693] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM") returned 73
	[0052.693] lstrlenW (lpString=".dbf") returned 4
	[0052.693] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0052.693] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM") returned 73
	[0052.693] lstrlenW (lpString=".1cd") returned 4
	[0052.693] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0052.693] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM") returned 73
	[0052.693] lstrlenW (lpString=".jpg") returned 4
	[0052.693] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0052.693] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=58026) returned 1
	[0052.693] CloseHandle (hObject=0x220) returned 1
	[0052.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm")) returned 0x20
	[0052.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.693] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0052.693] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.694] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.694] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0052.694] GetLastError () returned 0x0
	[0052.694] ReadFile (in: hFile=0x220, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xe2aa, lpOverlapped=0x0) returned 1
	[0052.696] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe2b0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe2b0, lpOverlapped=0x0) returned 1
	[0052.698] ReadFile (in: hFile=0x220, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.698] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0052.698] SetEndOfFile (hFile=0x1e0) returned 1
	[0052.698] CloseHandle (hObject=0x1e0) returned 1
	[0052.698] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.698] SetEndOfFile (hFile=0x220) returned 1
	[0052.699] CloseHandle (hObject=0x220) returned 1
	[0052.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.699] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm")) returned 1
	[0052.700] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70
	[0052.700] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70
	[0052.700] lstrlenW (lpString=".doc") returned 4
	[0052.700] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0052.700] lstrlenW (lpString=".docx") returned 5
	[0052.700] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1
	[0052.700] lstrlenW (lpString=".pdf") returned 4
	[0052.700] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0052.700] lstrlenW (lpString=".xls") returned 4
	[0052.700] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0052.700] lstrlenW (lpString=".xlsx") returned 5
	[0052.700] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1
	[0052.700] lstrlenW (lpString=".ppt") returned 4
	[0052.700] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0052.700] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70
	[0052.700] lstrlenW (lpString=".zip") returned 4
	[0052.700] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0052.700] lstrlenW (lpString=".rar") returned 4
	[0052.700] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0052.700] lstrlenW (lpString=".bz2") returned 4
	[0052.700] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0052.700] lstrlenW (lpString=".7z") returned 3
	[0052.700] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0052.700] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70
	[0052.700] lstrlenW (lpString=".dbf") returned 4
	[0052.700] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0052.700] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70
	[0052.701] lstrlenW (lpString=".1cd") returned 4
	[0052.701] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0052.701] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM") returned 70
	[0052.701] lstrlenW (lpString=".jpg") returned 4
	[0052.701] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0052.701] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=944994) returned 1
	[0052.701] CloseHandle (hObject=0x220) returned 1
	[0052.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm")) returned 0x20
	[0052.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.701] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0052.701] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.701] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.701] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0052.702] GetLastError () returned 0x0
	[0052.702] ReadFile (in: hFile=0x220, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xe6b62, lpOverlapped=0x0) returned 1
	[0052.804] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6b70, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6b70, lpOverlapped=0x0) returned 1
	[0052.821] ReadFile (in: hFile=0x220, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.821] WriteFile (in: hFile=0x1e0, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0052.821] SetEndOfFile (hFile=0x1e0) returned 1
	[0052.821] CloseHandle (hObject=0x1e0) returned 1
	[0052.822] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.822] SetEndOfFile (hFile=0x220) returned 1
	[0053.094] CloseHandle (hObject=0x220) returned 1
	[0053.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0053.095] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm")) returned 1
	[0053.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70
	[0053.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70
	[0053.095] lstrlenW (lpString=".doc") returned 4
	[0053.095] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0053.095] lstrlenW (lpString=".docx") returned 5
	[0053.095] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1
	[0053.095] lstrlenW (lpString=".pdf") returned 4
	[0053.095] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0053.095] lstrlenW (lpString=".xls") returned 4
	[0053.095] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0053.095] lstrlenW (lpString=".xlsx") returned 5
	[0053.095] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1
	[0053.095] lstrlenW (lpString=".ppt") returned 4
	[0053.095] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0053.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70
	[0053.095] lstrlenW (lpString=".zip") returned 4
	[0053.096] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0053.096] lstrlenW (lpString=".rar") returned 4
	[0053.096] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0053.096] lstrlenW (lpString=".bz2") returned 4
	[0053.096] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0053.096] lstrlenW (lpString=".7z") returned 3
	[0053.096] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0053.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70
	[0053.096] lstrlenW (lpString=".dbf") returned 4
	[0053.096] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0053.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70
	[0053.096] lstrlenW (lpString=".1cd") returned 4
	[0053.096] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0053.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM") returned 70
	[0053.096] lstrlenW (lpString=".jpg") returned 4
	[0053.096] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0055.498] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0055.499] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv") returned 75
	[0055.499] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv") returned 75
	[0055.499] lstrlenW (lpString=".doc") returned 4
	[0055.499] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1
	[0055.499] lstrlenW (lpString=".docx") returned 5
	[0055.499] lstrcmpiW (lpString1=".docx", lpString2="d.wmv") returned -1
	[0055.499] lstrlenW (lpString=".pdf") returned 4
	[0055.499] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1
	[0055.499] lstrlenW (lpString=".xls") returned 4
	[0055.499] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1
	[0055.499] lstrlenW (lpString=".xlsx") returned 5
	[0055.499] lstrcmpiW (lpString1=".xlsx", lpString2="d.wmv") returned -1
	[0055.499] lstrlenW (lpString=".ppt") returned 4
	[0055.499] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1
	[0055.499] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv") returned 75
	[0055.499] lstrlenW (lpString=".zip") returned 4
	[0055.499] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1
	[0055.499] lstrlenW (lpString=".rar") returned 4
	[0055.499] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1
	[0055.499] lstrlenW (lpString=".bz2") returned 4
	[0055.499] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1
	[0055.499] lstrlenW (lpString=".7z") returned 3
	[0055.499] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1
	[0055.499] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv") returned 75
	[0055.499] lstrlenW (lpString=".dbf") returned 4
	[0055.499] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1
	[0055.499] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv") returned 75
	[0055.499] lstrlenW (lpString=".1cd") returned 4
	[0055.500] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1
	[0055.500] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv") returned 75
	[0055.500] lstrlenW (lpString=".jpg") returned 4
	[0055.500] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1
	[0055.500] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0055.500] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv") returned 79
	[0055.500] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv") returned 79
	[0055.500] lstrlenW (lpString=".doc") returned 4
	[0055.500] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1
	[0055.500] lstrlenW (lpString=".docx") returned 5
	[0055.500] lstrcmpiW (lpString1=".docx", lpString2="L.wmv") returned -1
	[0055.500] lstrlenW (lpString=".pdf") returned 4
	[0055.500] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1
	[0055.500] lstrlenW (lpString=".xls") returned 4
	[0055.500] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1
	[0055.500] lstrlenW (lpString=".xlsx") returned 5
	[0055.500] lstrcmpiW (lpString1=".xlsx", lpString2="L.wmv") returned -1
	[0055.500] lstrlenW (lpString=".ppt") returned 4
	[0055.500] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1
	[0055.500] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv") returned 79
	[0055.500] lstrlenW (lpString=".zip") returned 4
	[0055.500] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1
	[0055.500] lstrlenW (lpString=".rar") returned 4
	[0055.501] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1
	[0055.501] lstrlenW (lpString=".bz2") returned 4
	[0055.501] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1
	[0055.501] lstrlenW (lpString=".7z") returned 3
	[0055.501] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1
	[0055.501] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv") returned 79
	[0055.501] lstrlenW (lpString=".dbf") returned 4
	[0055.501] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1
	[0055.501] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv") returned 79
	[0055.501] lstrlenW (lpString=".1cd") returned 4
	[0055.501] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1
	[0055.501] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv") returned 79
	[0055.501] lstrlenW (lpString=".jpg") returned 4
	[0055.501] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1
	[0055.501] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0055.501] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv") returned 82
	[0055.501] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv") returned 82
	[0055.501] lstrlenW (lpString=".doc") returned 4
	[0055.501] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1
	[0055.501] lstrlenW (lpString=".docx") returned 5
	[0055.501] lstrcmpiW (lpString1=".docx", lpString2="d.wmv") returned -1
	[0055.501] lstrlenW (lpString=".pdf") returned 4
	[0055.501] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1
	[0055.502] lstrlenW (lpString=".xls") returned 4
	[0055.502] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1
	[0055.502] lstrlenW (lpString=".xlsx") returned 5
	[0055.502] lstrcmpiW (lpString1=".xlsx", lpString2="d.wmv") returned -1
	[0055.502] lstrlenW (lpString=".ppt") returned 4
	[0055.502] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1
	[0055.502] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv") returned 82
	[0055.502] lstrlenW (lpString=".zip") returned 4
	[0055.502] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1
	[0055.502] lstrlenW (lpString=".rar") returned 4
	[0055.502] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1
	[0055.502] lstrlenW (lpString=".bz2") returned 4
	[0055.502] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1
	[0055.502] lstrlenW (lpString=".7z") returned 3
	[0055.502] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1
	[0055.502] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv") returned 82
	[0055.502] lstrlenW (lpString=".dbf") returned 4
	[0055.502] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1
	[0055.502] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv") returned 82
	[0055.502] lstrlenW (lpString=".1cd") returned 4
	[0055.502] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1
	[0055.502] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv") returned 82
	[0055.502] lstrlenW (lpString=".jpg") returned 4
	[0055.502] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1
	[0055.503] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0055.503] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv") returned 86
	[0055.503] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv") returned 86
	[0055.503] lstrlenW (lpString=".doc") returned 4
	[0055.503] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1
	[0055.503] lstrlenW (lpString=".docx") returned 5
	[0055.503] lstrcmpiW (lpString1=".docx", lpString2="L.wmv") returned -1
	[0055.503] lstrlenW (lpString=".pdf") returned 4
	[0055.503] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1
	[0055.503] lstrlenW (lpString=".xls") returned 4
	[0055.503] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1
	[0055.503] lstrlenW (lpString=".xlsx") returned 5
	[0055.503] lstrcmpiW (lpString1=".xlsx", lpString2="L.wmv") returned -1
	[0055.503] lstrlenW (lpString=".ppt") returned 4
	[0055.503] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1
	[0055.503] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv") returned 86
	[0055.504] lstrlenW (lpString=".zip") returned 4
	[0055.504] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1
	[0055.504] lstrlenW (lpString=".rar") returned 4
	[0055.504] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1
	[0055.504] lstrlenW (lpString=".bz2") returned 4
	[0055.504] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1
	[0055.504] lstrlenW (lpString=".7z") returned 3
	[0055.504] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1
	[0055.504] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv") returned 86
	[0055.504] lstrlenW (lpString=".dbf") returned 4
	[0055.504] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1
	[0055.504] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv") returned 86
	[0055.504] lstrlenW (lpString=".1cd") returned 4
	[0055.504] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1
	[0055.504] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv") returned 86
	[0055.504] lstrlenW (lpString=".jpg") returned 4
	[0055.504] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1
	[0055.504] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0055.504] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv") returned 83
	[0055.504] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv") returned 83
	[0055.504] lstrlenW (lpString=".doc") returned 4
	[0055.504] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1
	[0055.504] lstrlenW (lpString=".docx") returned 5
	[0055.504] lstrcmpiW (lpString1=".docx", lpString2="d.wmv") returned -1
	[0055.504] lstrlenW (lpString=".pdf") returned 4
	[0055.505] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1
	[0055.505] lstrlenW (lpString=".xls") returned 4
	[0055.505] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1
	[0055.505] lstrlenW (lpString=".xlsx") returned 5
	[0055.505] lstrcmpiW (lpString1=".xlsx", lpString2="d.wmv") returned -1
	[0055.505] lstrlenW (lpString=".ppt") returned 4
	[0055.505] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1
	[0055.505] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv") returned 83
	[0055.505] lstrlenW (lpString=".zip") returned 4
	[0055.505] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1
	[0055.505] lstrlenW (lpString=".rar") returned 4
	[0055.505] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1
	[0055.505] lstrlenW (lpString=".bz2") returned 4
	[0055.505] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1
	[0055.505] lstrlenW (lpString=".7z") returned 3
	[0055.505] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1
	[0055.505] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv") returned 83
	[0055.505] lstrlenW (lpString=".dbf") returned 4
	[0055.505] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1
	[0055.505] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv") returned 83
	[0055.505] lstrlenW (lpString=".1cd") returned 4
	[0055.505] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1
	[0055.505] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv") returned 83
	[0055.505] lstrlenW (lpString=".jpg") returned 4
	[0055.505] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1
	[0055.505] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0055.506] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv") returned 87
	[0055.506] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv") returned 87
	[0055.506] lstrlenW (lpString=".doc") returned 4
	[0055.506] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1
	[0055.506] lstrlenW (lpString=".docx") returned 5
	[0055.506] lstrcmpiW (lpString1=".docx", lpString2="L.wmv") returned -1
	[0055.506] lstrlenW (lpString=".pdf") returned 4
	[0055.506] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1
	[0055.506] lstrlenW (lpString=".xls") returned 4
	[0055.506] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1
	[0055.506] lstrlenW (lpString=".xlsx") returned 5
	[0055.506] lstrcmpiW (lpString1=".xlsx", lpString2="L.wmv") returned -1
	[0055.506] lstrlenW (lpString=".ppt") returned 4
	[0055.506] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1
	[0055.506] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv") returned 87
	[0055.506] lstrlenW (lpString=".zip") returned 4
	[0055.506] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1
	[0055.506] lstrlenW (lpString=".rar") returned 4
	[0055.506] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1
	[0055.506] lstrlenW (lpString=".bz2") returned 4
	[0055.506] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1
	[0055.506] lstrlenW (lpString=".7z") returned 3
	[0055.506] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1
	[0055.506] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv") returned 87
	[0055.506] lstrlenW (lpString=".dbf") returned 4
	[0055.506] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1
	[0055.506] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv") returned 87
	[0055.506] lstrlenW (lpString=".1cd") returned 4
	[0055.506] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1
	[0055.506] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv") returned 87
	[0055.506] lstrlenW (lpString=".jpg") returned 4
	[0055.506] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1
	[0055.507] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0055.507] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv") returned 76
	[0055.507] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv") returned 76
	[0055.507] lstrlenW (lpString=".doc") returned 4
	[0055.507] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1
	[0055.507] lstrlenW (lpString=".docx") returned 5
	[0055.507] lstrcmpiW (lpString1=".docx", lpString2="d.wmv") returned -1
	[0055.507] lstrlenW (lpString=".pdf") returned 4
	[0055.507] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1
	[0055.507] lstrlenW (lpString=".xls") returned 4
	[0055.507] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1
	[0055.507] lstrlenW (lpString=".xlsx") returned 5
	[0055.507] lstrcmpiW (lpString1=".xlsx", lpString2="d.wmv") returned -1
	[0055.507] lstrlenW (lpString=".ppt") returned 4
	[0055.507] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1
	[0055.507] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv") returned 76
	[0055.507] lstrlenW (lpString=".zip") returned 4
	[0055.507] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1
	[0055.507] lstrlenW (lpString=".rar") returned 4
	[0055.507] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1
	[0055.507] lstrlenW (lpString=".bz2") returned 4
	[0055.507] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1
	[0055.507] lstrlenW (lpString=".7z") returned 3
	[0055.507] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1
	[0055.507] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv") returned 76
	[0055.508] lstrlenW (lpString=".dbf") returned 4
	[0055.508] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1
	[0055.508] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv") returned 76
	[0055.508] lstrlenW (lpString=".1cd") returned 4
	[0055.508] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1
	[0055.508] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv") returned 76
	[0055.508] lstrlenW (lpString=".jpg") returned 4
	[0055.508] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1
	[0055.508] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0055.509] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv") returned 80
	[0055.509] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv") returned 80
	[0055.509] lstrlenW (lpString=".doc") returned 4
	[0055.509] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1
	[0055.509] lstrlenW (lpString=".docx") returned 5
	[0055.509] lstrcmpiW (lpString1=".docx", lpString2="L.wmv") returned -1
	[0055.509] lstrlenW (lpString=".pdf") returned 4
	[0055.509] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1
	[0055.509] lstrlenW (lpString=".xls") returned 4
	[0055.509] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1
	[0055.509] lstrlenW (lpString=".xlsx") returned 5
	[0055.509] lstrcmpiW (lpString1=".xlsx", lpString2="L.wmv") returned -1
	[0055.509] lstrlenW (lpString=".ppt") returned 4
	[0055.509] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1
	[0055.509] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv") returned 80
	[0055.509] lstrlenW (lpString=".zip") returned 4
	[0055.509] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1
	[0055.509] lstrlenW (lpString=".rar") returned 4
	[0055.509] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1
	[0055.509] lstrlenW (lpString=".bz2") returned 4
	[0055.509] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1
	[0055.509] lstrlenW (lpString=".7z") returned 3
	[0055.509] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1
	[0055.509] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv") returned 80
	[0055.509] lstrlenW (lpString=".dbf") returned 4
	[0055.509] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1
	[0055.509] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv") returned 80
	[0055.509] lstrlenW (lpString=".1cd") returned 4
	[0055.509] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1
	[0055.510] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv") returned 80
	[0055.510] lstrlenW (lpString=".jpg") returned 4
	[0055.510] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1
	[0055.510] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0055.510] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv") returned 77
	[0055.510] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv") returned 77
	[0055.510] lstrlenW (lpString=".doc") returned 4
	[0055.510] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1
	[0055.510] lstrlenW (lpString=".docx") returned 5
	[0055.510] lstrcmpiW (lpString1=".docx", lpString2="d.wmv") returned -1
	[0055.510] lstrlenW (lpString=".pdf") returned 4
	[0055.510] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1
	[0055.510] lstrlenW (lpString=".xls") returned 4
	[0055.510] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1
	[0055.510] lstrlenW (lpString=".xlsx") returned 5
	[0055.510] lstrcmpiW (lpString1=".xlsx", lpString2="d.wmv") returned -1
	[0055.510] lstrlenW (lpString=".ppt") returned 4
	[0055.510] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1
	[0055.510] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv") returned 77
	[0055.510] lstrlenW (lpString=".zip") returned 4
	[0055.510] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1
	[0055.510] lstrlenW (lpString=".rar") returned 4
	[0055.510] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1
	[0055.510] lstrlenW (lpString=".bz2") returned 4
	[0055.510] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1
	[0055.511] lstrlenW (lpString=".7z") returned 3
	[0055.511] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1
	[0055.511] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv") returned 77
	[0055.511] lstrlenW (lpString=".dbf") returned 4
	[0055.511] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1
	[0055.511] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv") returned 77
	[0055.511] lstrlenW (lpString=".1cd") returned 4
	[0055.511] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1
	[0055.511] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv") returned 77
	[0055.511] lstrlenW (lpString=".jpg") returned 4
	[0055.511] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1
	[0055.511] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0055.511] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv") returned 81
	[0055.511] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv") returned 81
	[0055.511] lstrlenW (lpString=".doc") returned 4
	[0055.511] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1
	[0055.511] lstrlenW (lpString=".docx") returned 5
	[0055.511] lstrcmpiW (lpString1=".docx", lpString2="L.wmv") returned -1
	[0055.511] lstrlenW (lpString=".pdf") returned 4
	[0055.511] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1
	[0055.511] lstrlenW (lpString=".xls") returned 4
	[0055.511] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1
	[0055.511] lstrlenW (lpString=".xlsx") returned 5
	[0055.511] lstrcmpiW (lpString1=".xlsx", lpString2="L.wmv") returned -1
	[0055.511] lstrlenW (lpString=".ppt") returned 4
	[0055.512] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1
	[0055.512] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv") returned 81
	[0055.512] lstrlenW (lpString=".zip") returned 4
	[0055.512] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1
	[0055.512] lstrlenW (lpString=".rar") returned 4
	[0055.512] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1
	[0055.512] lstrlenW (lpString=".bz2") returned 4
	[0055.512] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1
	[0055.512] lstrlenW (lpString=".7z") returned 3
	[0055.512] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1
	[0055.512] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv") returned 81
	[0055.512] lstrlenW (lpString=".dbf") returned 4
	[0055.512] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1
	[0055.512] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv") returned 81
	[0055.512] lstrlenW (lpString=".1cd") returned 4
	[0055.512] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1
	[0055.512] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv") returned 81
	[0055.512] lstrlenW (lpString=".jpg") returned 4
	[0055.512] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1
	[0055.528] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.529] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0055.529] GetLastError () returned 0x0
	[0055.529] ReadFile (in: hFile=0x1b0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x4360, lpOverlapped=0x0) returned 1
	[0055.725] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x4370, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x4370, lpOverlapped=0x0) returned 1
	[0055.726] ReadFile (in: hFile=0x1b0, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.726] WriteFile (in: hFile=0x220, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xe4, lpOverlapped=0x0) returned 1
	[0055.726] SetEndOfFile (hFile=0x220) returned 1
	[0057.181] CloseHandle (hObject=0x220) returned 1
	[0057.192] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.192] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.384] CloseHandle (hObject=0x1b0) returned 1
	[0057.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.386] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 1
	[0057.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76
	[0057.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76
	[0057.386] lstrlenW (lpString=".doc") returned 4
	[0057.386] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1
	[0057.386] lstrlenW (lpString=".docx") returned 5
	[0057.386] lstrcmpiW (lpString1=".docx", lpString2="0.xsl") returned -1
	[0057.386] lstrlenW (lpString=".pdf") returned 4
	[0057.392] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1
	[0057.392] lstrlenW (lpString=".xls") returned 4
	[0057.392] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1
	[0057.392] lstrlenW (lpString=".xlsx") returned 5
	[0057.392] lstrcmpiW (lpString1=".xlsx", lpString2="0.xsl") returned -1
	[0057.394] lstrlenW (lpString=".ppt") returned 4
	[0057.394] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1
	[0057.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76
	[0057.394] lstrlenW (lpString=".zip") returned 4
	[0057.394] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1
	[0057.394] lstrlenW (lpString=".rar") returned 4
	[0057.394] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1
	[0057.394] lstrlenW (lpString=".bz2") returned 4
	[0057.394] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1
	[0057.394] lstrlenW (lpString=".7z") returned 3
	[0057.394] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1
	[0057.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76
	[0057.394] lstrlenW (lpString=".dbf") returned 4
	[0057.394] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1
	[0057.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76
	[0057.394] lstrlenW (lpString=".1cd") returned 4
	[0057.394] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1
	[0057.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned 76
	[0057.394] lstrlenW (lpString=".jpg") returned 4
	[0057.394] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1
	[0057.395] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.395] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0057.396] GetLastError () returned 0x0
	[0057.396] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x1c30, lpOverlapped=0x0) returned 1
	[0057.441] WriteFile (in: hFile=0x21c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x1c40, lpOverlapped=0x0) returned 1
	[0057.442] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.442] WriteFile (in: hFile=0x21c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.442] SetEndOfFile (hFile=0x21c) returned 1
	[0057.673] CloseHandle (hObject=0x21c) returned 1
	[0057.685] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.685] SetEndOfFile (hFile=0x224) returned 1
	[0057.715] CloseHandle (hObject=0x224) returned 1
	[0057.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.726] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif")) returned 1
	[0057.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 63
	[0057.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 63
	[0057.733] lstrlenW (lpString=".doc") returned 4
	[0057.733] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.733] lstrlenW (lpString=".docx") returned 5
	[0057.733] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.733] lstrlenW (lpString=".pdf") returned 4
	[0057.733] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.733] lstrlenW (lpString=".xls") returned 4
	[0057.733] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.733] lstrlenW (lpString=".xlsx") returned 5
	[0057.733] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.733] lstrlenW (lpString=".ppt") returned 4
	[0057.733] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 63
	[0057.734] lstrlenW (lpString=".zip") returned 4
	[0057.734] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.734] lstrlenW (lpString=".rar") returned 4
	[0057.734] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.734] lstrlenW (lpString=".bz2") returned 4
	[0057.734] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.734] lstrlenW (lpString=".7z") returned 3
	[0057.734] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 63
	[0057.734] lstrlenW (lpString=".dbf") returned 4
	[0057.734] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 63
	[0057.734] lstrlenW (lpString=".1cd") returned 4
	[0057.734] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 63
	[0057.734] lstrlenW (lpString=".jpg") returned 4
	[0057.734] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.878] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.879] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0058.879] GetLastError () returned 0x0
	[0058.879] ReadFile (in: hFile=0x1e4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xa24, lpOverlapped=0x0) returned 1
	[0058.883] WriteFile (in: hFile=0x240, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xa30, lpOverlapped=0x0) returned 1
	[0058.884] ReadFile (in: hFile=0x1e4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.885] WriteFile (in: hFile=0x240, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.885] SetEndOfFile (hFile=0x240) returned 1
	[0058.885] CloseHandle (hObject=0x240) returned 1
	[0058.885] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.885] SetEndOfFile (hFile=0x1e4) returned 1
	[0058.886] CloseHandle (hObject=0x1e4) returned 1
	[0058.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.886] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif")) returned 1
	[0058.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 63
	[0058.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 63
	[0058.886] lstrlenW (lpString=".doc") returned 4
	[0058.886] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.886] lstrlenW (lpString=".docx") returned 5
	[0058.886] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.886] lstrlenW (lpString=".pdf") returned 4
	[0058.886] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.887] lstrlenW (lpString=".xls") returned 4
	[0058.887] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.887] lstrlenW (lpString=".xlsx") returned 5
	[0058.887] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.887] lstrlenW (lpString=".ppt") returned 4
	[0058.887] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 63
	[0058.887] lstrlenW (lpString=".zip") returned 4
	[0058.887] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.887] lstrlenW (lpString=".rar") returned 4
	[0058.887] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.887] lstrlenW (lpString=".bz2") returned 4
	[0058.887] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.887] lstrlenW (lpString=".7z") returned 3
	[0058.887] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 63
	[0058.887] lstrlenW (lpString=".dbf") returned 4
	[0058.887] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 63
	[0058.887] lstrlenW (lpString=".1cd") returned 4
	[0058.887] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 63
	[0058.887] lstrlenW (lpString=".jpg") returned 4
	[0058.887] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.888] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=10832) returned 1
	[0058.888] CloseHandle (hObject=0x1e4) returned 1
	[0058.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf")) returned 0x20
	[0058.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0058.889] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.889] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0058.889] GetLastError () returned 0x0
	[0058.889] ReadFile (in: hFile=0x1e4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x2a50, lpOverlapped=0x0) returned 1
	[0058.891] WriteFile (in: hFile=0x240, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x2a60, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x2a60, lpOverlapped=0x0) returned 1
	[0058.892] ReadFile (in: hFile=0x1e4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.892] WriteFile (in: hFile=0x240, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.892] SetEndOfFile (hFile=0x240) returned 1
	[0058.892] CloseHandle (hObject=0x240) returned 1
	[0058.893] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.893] SetEndOfFile (hFile=0x1e4) returned 1
	[0058.893] CloseHandle (hObject=0x1e4) returned 1
	[0058.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.894] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf")) returned 1
	[0058.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 63
	[0058.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 63
	[0058.894] lstrlenW (lpString=".doc") returned 4
	[0058.894] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0058.894] lstrlenW (lpString=".docx") returned 5
	[0058.894] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0058.894] lstrlenW (lpString=".pdf") returned 4
	[0058.894] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0058.894] lstrlenW (lpString=".xls") returned 4
	[0058.894] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0058.894] lstrlenW (lpString=".xlsx") returned 5
	[0058.894] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0058.894] lstrlenW (lpString=".ppt") returned 4
	[0058.894] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0058.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 63
	[0058.894] lstrlenW (lpString=".zip") returned 4
	[0058.894] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0058.894] lstrlenW (lpString=".rar") returned 4
	[0058.894] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0058.894] lstrlenW (lpString=".bz2") returned 4
	[0058.894] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0058.895] lstrlenW (lpString=".7z") returned 3
	[0058.895] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0058.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 63
	[0058.895] lstrlenW (lpString=".dbf") returned 4
	[0058.895] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0058.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 63
	[0058.895] lstrlenW (lpString=".1cd") returned 4
	[0058.895] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0058.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 63
	[0058.895] lstrlenW (lpString=".jpg") returned 4
	[0058.895] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0058.895] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=14428) returned 1
	[0058.895] CloseHandle (hObject=0x1e4) returned 1
	[0058.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf")) returned 0x20
	[0058.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0058.896] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.896] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0058.896] GetLastError () returned 0x0
	[0058.896] ReadFile (in: hFile=0x1e4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x385c, lpOverlapped=0x0) returned 1
	[0058.898] WriteFile (in: hFile=0x240, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x3860, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x3860, lpOverlapped=0x0) returned 1
	[0058.900] ReadFile (in: hFile=0x1e4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.900] WriteFile (in: hFile=0x240, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.900] SetEndOfFile (hFile=0x240) returned 1
	[0058.900] CloseHandle (hObject=0x240) returned 1
	[0058.900] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.900] SetEndOfFile (hFile=0x1e4) returned 1
	[0058.901] CloseHandle (hObject=0x1e4) returned 1
	[0058.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.901] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf")) returned 1
	[0058.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 63
	[0058.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 63
	[0058.901] lstrlenW (lpString=".doc") returned 4
	[0058.901] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0058.901] lstrlenW (lpString=".docx") returned 5
	[0058.901] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0058.901] lstrlenW (lpString=".pdf") returned 4
	[0058.902] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0058.902] lstrlenW (lpString=".xls") returned 4
	[0058.902] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0058.902] lstrlenW (lpString=".xlsx") returned 5
	[0058.902] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0058.902] lstrlenW (lpString=".ppt") returned 4
	[0058.902] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0058.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 63
	[0058.902] lstrlenW (lpString=".zip") returned 4
	[0058.902] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0058.902] lstrlenW (lpString=".rar") returned 4
	[0058.902] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0058.902] lstrlenW (lpString=".bz2") returned 4
	[0058.902] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0058.902] lstrlenW (lpString=".7z") returned 3
	[0058.902] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0058.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 63
	[0058.902] lstrlenW (lpString=".dbf") returned 4
	[0058.902] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0058.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 63
	[0058.902] lstrlenW (lpString=".1cd") returned 4
	[0058.902] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0058.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 63
	[0058.902] lstrlenW (lpString=".jpg") returned 4
	[0058.902] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0058.903] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.903] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0058.903] GetLastError () returned 0x0
	[0058.903] ReadFile (in: hFile=0x1e4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x1ba0, lpOverlapped=0x0) returned 1
	[0058.905] WriteFile (in: hFile=0x240, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x1bb0, lpOverlapped=0x0) returned 1
	[0058.906] ReadFile (in: hFile=0x1e4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.906] WriteFile (in: hFile=0x240, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.906] SetEndOfFile (hFile=0x240) returned 1
	[0058.906] CloseHandle (hObject=0x240) returned 1
	[0058.906] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.906] SetEndOfFile (hFile=0x1e4) returned 1
	[0058.907] CloseHandle (hObject=0x1e4) returned 1
	[0058.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.907] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf")) returned 1
	[0058.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 63
	[0058.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 63
	[0058.908] lstrlenW (lpString=".doc") returned 4
	[0058.908] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0058.908] lstrlenW (lpString=".docx") returned 5
	[0058.908] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0058.908] lstrlenW (lpString=".pdf") returned 4
	[0058.908] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0058.908] lstrlenW (lpString=".xls") returned 4
	[0058.908] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0058.908] lstrlenW (lpString=".xlsx") returned 5
	[0058.908] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0058.908] lstrlenW (lpString=".ppt") returned 4
	[0058.908] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0058.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 63
	[0058.908] lstrlenW (lpString=".zip") returned 4
	[0058.908] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0058.908] lstrlenW (lpString=".rar") returned 4
	[0058.908] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0058.908] lstrlenW (lpString=".bz2") returned 4
	[0058.908] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0058.908] lstrlenW (lpString=".7z") returned 3
	[0058.908] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0058.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 63
	[0058.908] lstrlenW (lpString=".dbf") returned 4
	[0058.908] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0058.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 63
	[0058.908] lstrlenW (lpString=".1cd") returned 4
	[0058.908] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0058.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 63
	[0058.908] lstrlenW (lpString=".jpg") returned 4
	[0058.908] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0058.909] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.909] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0058.909] GetLastError () returned 0x0
	[0058.909] ReadFile (in: hFile=0x1e4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xd10, lpOverlapped=0x0) returned 1
	[0058.911] WriteFile (in: hFile=0x240, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xd20, lpOverlapped=0x0) returned 1
	[0058.912] ReadFile (in: hFile=0x1e4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.912] WriteFile (in: hFile=0x240, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.912] SetEndOfFile (hFile=0x240) returned 1
	[0058.912] CloseHandle (hObject=0x240) returned 1
	[0058.912] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.912] SetEndOfFile (hFile=0x1e4) returned 1
	[0058.913] CloseHandle (hObject=0x1e4) returned 1
	[0058.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.914] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf")) returned 1
	[0058.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 63
	[0058.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 63
	[0058.914] lstrlenW (lpString=".doc") returned 4
	[0058.914] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0058.914] lstrlenW (lpString=".docx") returned 5
	[0058.914] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0058.914] lstrlenW (lpString=".pdf") returned 4
	[0058.914] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0058.914] lstrlenW (lpString=".xls") returned 4
	[0058.914] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0058.914] lstrlenW (lpString=".xlsx") returned 5
	[0058.914] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0058.914] lstrlenW (lpString=".ppt") returned 4
	[0058.914] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0058.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 63
	[0058.914] lstrlenW (lpString=".zip") returned 4
	[0058.914] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0058.915] lstrlenW (lpString=".rar") returned 4
	[0058.915] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0058.915] lstrlenW (lpString=".bz2") returned 4
	[0058.915] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0058.915] lstrlenW (lpString=".7z") returned 3
	[0058.915] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0058.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 63
	[0058.915] lstrlenW (lpString=".dbf") returned 4
	[0058.915] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0058.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 63
	[0058.915] lstrlenW (lpString=".1cd") returned 4
	[0058.915] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0058.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 63
	[0058.915] lstrlenW (lpString=".jpg") returned 4
	[0058.915] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0058.915] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7a1ff1c | out: lpFileSize=0x7a1ff1c*=1596) returned 1
	[0058.915] CloseHandle (hObject=0x1e4) returned 1
	[0058.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf")) returned 0x20
	[0058.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0058.916] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.916] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0058.916] GetLastError () returned 0x0
	[0058.916] ReadFile (in: hFile=0x1e4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x63c, lpOverlapped=0x0) returned 1
	[0059.015] WriteFile (in: hFile=0x240, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x640, lpOverlapped=0x0) returned 1
	[0059.054] ReadFile (in: hFile=0x1e4, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0059.054] WriteFile (in: hFile=0x240, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0059.054] SetEndOfFile (hFile=0x240) returned 1
	[0059.399] CloseHandle (hObject=0x240) returned 1
	[0059.399] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.399] SetEndOfFile (hFile=0x1e4) returned 1
	[0059.400] CloseHandle (hObject=0x1e4) returned 1
	[0059.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0059.400] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf")) returned 1
	[0059.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 63
	[0059.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 63
	[0059.554] lstrlenW (lpString=".doc") returned 4
	[0059.554] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0059.554] lstrlenW (lpString=".docx") returned 5
	[0059.554] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0059.554] lstrlenW (lpString=".pdf") returned 4
	[0059.554] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0059.554] lstrlenW (lpString=".xls") returned 4
	[0059.554] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0059.554] lstrlenW (lpString=".xlsx") returned 5
	[0059.554] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0059.554] lstrlenW (lpString=".ppt") returned 4
	[0059.554] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0059.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 63
	[0059.555] lstrlenW (lpString=".zip") returned 4
	[0059.555] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0059.555] lstrlenW (lpString=".rar") returned 4
	[0059.555] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0059.555] lstrlenW (lpString=".bz2") returned 4
	[0059.555] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0059.555] lstrlenW (lpString=".7z") returned 3
	[0059.555] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0059.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 63
	[0059.555] lstrlenW (lpString=".dbf") returned 4
	[0059.555] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0059.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 63
	[0059.555] lstrlenW (lpString=".1cd") returned 4
	[0059.555] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0059.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 63
	[0059.555] lstrlenW (lpString=".jpg") returned 4
	[0059.555] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0060.627] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.627] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0060.627] GetLastError () returned 0x0
	[0060.627] ReadFile (in: hFile=0x218, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x6cd2, lpOverlapped=0x0) returned 1
	[0060.629] WriteFile (in: hFile=0x1b8, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x6ce0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x6ce0, lpOverlapped=0x0) returned 1
	[0060.630] ReadFile (in: hFile=0x218, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.630] WriteFile (in: hFile=0x1b8, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0060.630] SetEndOfFile (hFile=0x1b8) returned 1
	[0060.631] CloseHandle (hObject=0x1b8) returned 1
	[0060.631] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.631] SetEndOfFile (hFile=0x218) returned 1
	[0060.632] CloseHandle (hObject=0x218) returned 1
	[0060.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.632] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf")) returned 1
	[0060.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 63
	[0060.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 63
	[0060.632] lstrlenW (lpString=".doc") returned 4
	[0060.632] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0060.632] lstrlenW (lpString=".docx") returned 5
	[0060.633] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0060.633] lstrlenW (lpString=".pdf") returned 4
	[0060.633] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0060.633] lstrlenW (lpString=".xls") returned 4
	[0060.633] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0060.633] lstrlenW (lpString=".xlsx") returned 5
	[0060.633] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0060.633] lstrlenW (lpString=".ppt") returned 4
	[0060.633] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0060.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 63
	[0060.633] lstrlenW (lpString=".zip") returned 4
	[0060.633] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0060.633] lstrlenW (lpString=".rar") returned 4
	[0060.633] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0060.633] lstrlenW (lpString=".bz2") returned 4
	[0060.633] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0060.633] lstrlenW (lpString=".7z") returned 3
	[0060.633] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0060.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 63
	[0060.633] lstrlenW (lpString=".dbf") returned 4
	[0060.633] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0060.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 63
	[0060.633] lstrlenW (lpString=".1cd") returned 4
	[0060.633] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0060.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 63
	[0060.633] lstrlenW (lpString=".jpg") returned 4
	[0060.633] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0060.744] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.744] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0060.745] GetLastError () returned 0x0
	[0060.745] ReadFile (in: hFile=0x204, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xea2, lpOverlapped=0x0) returned 1
	[0060.752] WriteFile (in: hFile=0x234, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xeb0, lpOverlapped=0x0) returned 1
	[0060.753] ReadFile (in: hFile=0x204, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.753] WriteFile (in: hFile=0x234, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0060.753] SetEndOfFile (hFile=0x234) returned 1
	[0060.753] CloseHandle (hObject=0x234) returned 1
	[0060.753] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.753] SetEndOfFile (hFile=0x204) returned 1
	[0060.754] CloseHandle (hObject=0x204) returned 1
	[0060.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.754] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf")) returned 1
	[0060.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 63
	[0060.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 63
	[0060.755] lstrlenW (lpString=".doc") returned 4
	[0060.755] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0060.755] lstrlenW (lpString=".docx") returned 5
	[0060.755] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0060.755] lstrlenW (lpString=".pdf") returned 4
	[0060.755] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0060.755] lstrlenW (lpString=".xls") returned 4
	[0060.755] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0060.755] lstrlenW (lpString=".xlsx") returned 5
	[0060.755] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0060.755] lstrlenW (lpString=".ppt") returned 4
	[0060.755] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0060.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 63
	[0060.755] lstrlenW (lpString=".zip") returned 4
	[0060.755] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0060.755] lstrlenW (lpString=".rar") returned 4
	[0060.755] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0060.755] lstrlenW (lpString=".bz2") returned 4
	[0060.755] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0060.755] lstrlenW (lpString=".7z") returned 3
	[0060.755] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0060.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 63
	[0060.755] lstrlenW (lpString=".dbf") returned 4
	[0060.755] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0060.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 63
	[0060.755] lstrlenW (lpString=".1cd") returned 4
	[0060.755] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0060.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 63
	[0060.755] lstrlenW (lpString=".jpg") returned 4
	[0060.755] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0060.756] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.756] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0060.756] GetLastError () returned 0x0
	[0060.756] ReadFile (in: hFile=0x204, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x16cc, lpOverlapped=0x0) returned 1
	[0060.758] WriteFile (in: hFile=0x234, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x16d0, lpOverlapped=0x0) returned 1
	[0060.758] ReadFile (in: hFile=0x204, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.759] WriteFile (in: hFile=0x234, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0060.759] SetEndOfFile (hFile=0x234) returned 1
	[0060.759] CloseHandle (hObject=0x234) returned 1
	[0060.759] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.759] SetEndOfFile (hFile=0x204) returned 1
	[0060.760] CloseHandle (hObject=0x204) returned 1
	[0060.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.760] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf")) returned 1
	[0060.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 63
	[0060.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 63
	[0060.760] lstrlenW (lpString=".doc") returned 4
	[0060.760] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0060.760] lstrlenW (lpString=".docx") returned 5
	[0060.760] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0060.760] lstrlenW (lpString=".pdf") returned 4
	[0060.760] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0060.760] lstrlenW (lpString=".xls") returned 4
	[0060.761] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0060.761] lstrlenW (lpString=".xlsx") returned 5
	[0060.761] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0060.761] lstrlenW (lpString=".ppt") returned 4
	[0060.761] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0060.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 63
	[0060.761] lstrlenW (lpString=".zip") returned 4
	[0060.761] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0060.761] lstrlenW (lpString=".rar") returned 4
	[0060.761] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0060.761] lstrlenW (lpString=".bz2") returned 4
	[0060.761] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0060.761] lstrlenW (lpString=".7z") returned 3
	[0060.761] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0060.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 63
	[0060.761] lstrlenW (lpString=".dbf") returned 4
	[0060.761] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0060.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 63
	[0060.761] lstrlenW (lpString=".1cd") returned 4
	[0060.761] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0060.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 63
	[0060.761] lstrlenW (lpString=".jpg") returned 4
	[0060.761] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0060.761] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.761] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0060.762] GetLastError () returned 0x0
	[0060.762] ReadFile (in: hFile=0x204, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xbc4, lpOverlapped=0x0) returned 1
	[0060.763] WriteFile (in: hFile=0x234, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xbd0, lpOverlapped=0x0) returned 1
	[0060.764] ReadFile (in: hFile=0x204, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.764] WriteFile (in: hFile=0x234, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0060.764] SetEndOfFile (hFile=0x234) returned 1
	[0060.764] CloseHandle (hObject=0x234) returned 1
	[0060.765] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.765] SetEndOfFile (hFile=0x204) returned 1
	[0060.765] CloseHandle (hObject=0x204) returned 1
	[0060.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.766] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf")) returned 1
	[0060.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 63
	[0060.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 63
	[0060.766] lstrlenW (lpString=".doc") returned 4
	[0060.766] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0060.766] lstrlenW (lpString=".docx") returned 5
	[0060.766] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0060.766] lstrlenW (lpString=".pdf") returned 4
	[0060.766] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0060.766] lstrlenW (lpString=".xls") returned 4
	[0060.766] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0060.766] lstrlenW (lpString=".xlsx") returned 5
	[0060.766] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0060.766] lstrlenW (lpString=".ppt") returned 4
	[0060.766] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0060.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 63
	[0060.766] lstrlenW (lpString=".zip") returned 4
	[0060.766] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0060.766] lstrlenW (lpString=".rar") returned 4
	[0060.766] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0060.766] lstrlenW (lpString=".bz2") returned 4
	[0060.766] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0060.766] lstrlenW (lpString=".7z") returned 3
	[0060.766] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0060.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 63
	[0060.767] lstrlenW (lpString=".dbf") returned 4
	[0060.767] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0060.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 63
	[0060.767] lstrlenW (lpString=".1cd") returned 4
	[0060.767] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0060.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 63
	[0060.767] lstrlenW (lpString=".jpg") returned 4
	[0060.767] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0060.767] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.767] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0060.767] GetLastError () returned 0x0
	[0060.767] ReadFile (in: hFile=0x204, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xac4, lpOverlapped=0x0) returned 1
	[0060.833] WriteFile (in: hFile=0x234, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xad0, lpOverlapped=0x0) returned 1
	[0060.834] ReadFile (in: hFile=0x204, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.834] WriteFile (in: hFile=0x234, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0060.834] SetEndOfFile (hFile=0x234) returned 1
	[0060.834] CloseHandle (hObject=0x234) returned 1
	[0060.834] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.834] SetEndOfFile (hFile=0x204) returned 1
	[0060.835] CloseHandle (hObject=0x204) returned 1
	[0060.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.835] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf")) returned 1
	[0060.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 63
	[0060.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 63
	[0060.836] lstrlenW (lpString=".doc") returned 4
	[0060.836] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0060.836] lstrlenW (lpString=".docx") returned 5
	[0060.836] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0060.836] lstrlenW (lpString=".pdf") returned 4
	[0060.836] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0060.836] lstrlenW (lpString=".xls") returned 4
	[0060.836] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0060.836] lstrlenW (lpString=".xlsx") returned 5
	[0060.836] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0060.836] lstrlenW (lpString=".ppt") returned 4
	[0060.836] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0060.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 63
	[0060.836] lstrlenW (lpString=".zip") returned 4
	[0060.836] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0060.836] lstrlenW (lpString=".rar") returned 4
	[0060.836] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0060.836] lstrlenW (lpString=".bz2") returned 4
	[0060.836] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0060.836] lstrlenW (lpString=".7z") returned 3
	[0060.836] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0060.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 63
	[0060.836] lstrlenW (lpString=".dbf") returned 4
	[0060.836] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0060.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 63
	[0060.836] lstrlenW (lpString=".1cd") returned 4
	[0060.836] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0060.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 63
	[0060.836] lstrlenW (lpString=".jpg") returned 4
	[0060.836] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0060.837] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.837] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0060.837] GetLastError () returned 0x0
	[0060.837] ReadFile (in: hFile=0x204, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x1ccc, lpOverlapped=0x0) returned 1
	[0060.838] WriteFile (in: hFile=0x234, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x1cd0, lpOverlapped=0x0) returned 1
	[0060.839] ReadFile (in: hFile=0x204, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.839] WriteFile (in: hFile=0x234, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0060.840] SetEndOfFile (hFile=0x234) returned 1
	[0060.840] CloseHandle (hObject=0x234) returned 1
	[0060.840] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.840] SetEndOfFile (hFile=0x204) returned 1
	[0060.841] CloseHandle (hObject=0x204) returned 1
	[0060.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.841] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf")) returned 1
	[0060.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 63
	[0060.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 63
	[0060.841] lstrlenW (lpString=".doc") returned 4
	[0060.841] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0060.841] lstrlenW (lpString=".docx") returned 5
	[0060.841] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0060.841] lstrlenW (lpString=".pdf") returned 4
	[0060.841] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0060.841] lstrlenW (lpString=".xls") returned 4
	[0060.841] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0060.841] lstrlenW (lpString=".xlsx") returned 5
	[0060.841] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0060.842] lstrlenW (lpString=".ppt") returned 4
	[0060.842] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0060.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 63
	[0060.842] lstrlenW (lpString=".zip") returned 4
	[0060.842] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0060.842] lstrlenW (lpString=".rar") returned 4
	[0060.842] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0060.842] lstrlenW (lpString=".bz2") returned 4
	[0060.842] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0060.842] lstrlenW (lpString=".7z") returned 3
	[0060.842] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0060.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 63
	[0060.842] lstrlenW (lpString=".dbf") returned 4
	[0060.842] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0060.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 63
	[0060.842] lstrlenW (lpString=".1cd") returned 4
	[0060.842] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0060.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 63
	[0060.842] lstrlenW (lpString=".jpg") returned 4
	[0060.842] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.148] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.155] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0061.155] GetLastError () returned 0x0
	[0061.155] ReadFile (in: hFile=0x208, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x1d74, lpOverlapped=0x0) returned 1
	[0061.266] WriteFile (in: hFile=0x1ac, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x1d80, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x1d80, lpOverlapped=0x0) returned 1
	[0061.267] ReadFile (in: hFile=0x208, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.267] WriteFile (in: hFile=0x1ac, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.267] SetEndOfFile (hFile=0x1ac) returned 1
	[0061.267] CloseHandle (hObject=0x1ac) returned 1
	[0061.267] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.267] SetEndOfFile (hFile=0x208) returned 1
	[0061.268] CloseHandle (hObject=0x208) returned 1
	[0061.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.269] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf")) returned 1
	[0061.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 63
	[0061.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 63
	[0061.269] lstrlenW (lpString=".doc") returned 4
	[0061.269] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.269] lstrlenW (lpString=".docx") returned 5
	[0061.270] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.270] lstrlenW (lpString=".pdf") returned 4
	[0061.270] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.270] lstrlenW (lpString=".xls") returned 4
	[0061.270] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.270] lstrlenW (lpString=".xlsx") returned 5
	[0061.270] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.270] lstrlenW (lpString=".ppt") returned 4
	[0061.270] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 63
	[0061.270] lstrlenW (lpString=".zip") returned 4
	[0061.270] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.270] lstrlenW (lpString=".rar") returned 4
	[0061.270] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.270] lstrlenW (lpString=".bz2") returned 4
	[0061.270] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.270] lstrlenW (lpString=".7z") returned 3
	[0061.270] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 63
	[0061.270] lstrlenW (lpString=".dbf") returned 4
	[0061.270] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 63
	[0061.270] lstrlenW (lpString=".1cd") returned 4
	[0061.270] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 63
	[0061.270] lstrlenW (lpString=".jpg") returned 4
	[0061.270] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.271] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.271] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0061.272] GetLastError () returned 0x0
	[0061.272] ReadFile (in: hFile=0x208, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xa4c, lpOverlapped=0x0) returned 1
	[0061.273] WriteFile (in: hFile=0x1ac, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xa50, lpOverlapped=0x0) returned 1
	[0061.274] ReadFile (in: hFile=0x208, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.274] WriteFile (in: hFile=0x1ac, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.275] SetEndOfFile (hFile=0x1ac) returned 1
	[0061.275] CloseHandle (hObject=0x1ac) returned 1
	[0061.275] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.275] SetEndOfFile (hFile=0x208) returned 1
	[0061.276] CloseHandle (hObject=0x208) returned 1
	[0061.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.276] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf")) returned 1
	[0061.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 63
	[0061.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 63
	[0061.276] lstrlenW (lpString=".doc") returned 4
	[0061.276] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.276] lstrlenW (lpString=".docx") returned 5
	[0061.276] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.276] lstrlenW (lpString=".pdf") returned 4
	[0061.277] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.277] lstrlenW (lpString=".xls") returned 4
	[0061.277] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.277] lstrlenW (lpString=".xlsx") returned 5
	[0061.277] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.277] lstrlenW (lpString=".ppt") returned 4
	[0061.277] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 63
	[0061.277] lstrlenW (lpString=".zip") returned 4
	[0061.277] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.277] lstrlenW (lpString=".rar") returned 4
	[0061.277] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.277] lstrlenW (lpString=".bz2") returned 4
	[0061.277] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.277] lstrlenW (lpString=".7z") returned 3
	[0061.277] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 63
	[0061.277] lstrlenW (lpString=".dbf") returned 4
	[0061.277] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 63
	[0061.277] lstrlenW (lpString=".1cd") returned 4
	[0061.277] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 63
	[0061.277] lstrlenW (lpString=".jpg") returned 4
	[0061.277] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.278] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.278] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0061.278] GetLastError () returned 0x0
	[0061.278] ReadFile (in: hFile=0x208, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x19ec, lpOverlapped=0x0) returned 1
	[0061.279] WriteFile (in: hFile=0x1ac, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x19f0, lpOverlapped=0x0) returned 1
	[0061.280] ReadFile (in: hFile=0x208, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.281] WriteFile (in: hFile=0x1ac, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.281] SetEndOfFile (hFile=0x1ac) returned 1
	[0061.281] CloseHandle (hObject=0x1ac) returned 1
	[0061.281] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.281] SetEndOfFile (hFile=0x208) returned 1
	[0061.282] CloseHandle (hObject=0x208) returned 1
	[0061.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.282] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf")) returned 1
	[0061.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 63
	[0061.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 63
	[0061.282] lstrlenW (lpString=".doc") returned 4
	[0061.282] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.282] lstrlenW (lpString=".docx") returned 5
	[0061.282] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.282] lstrlenW (lpString=".pdf") returned 4
	[0061.282] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.283] lstrlenW (lpString=".xls") returned 4
	[0061.283] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.283] lstrlenW (lpString=".xlsx") returned 5
	[0061.283] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.283] lstrlenW (lpString=".ppt") returned 4
	[0061.283] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 63
	[0061.283] lstrlenW (lpString=".zip") returned 4
	[0061.283] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.283] lstrlenW (lpString=".rar") returned 4
	[0061.283] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.283] lstrlenW (lpString=".bz2") returned 4
	[0061.283] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.283] lstrlenW (lpString=".7z") returned 3
	[0061.283] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 63
	[0061.283] lstrlenW (lpString=".dbf") returned 4
	[0061.283] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 63
	[0061.283] lstrlenW (lpString=".1cd") returned 4
	[0061.283] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 63
	[0061.283] lstrlenW (lpString=".jpg") returned 4
	[0061.283] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.283] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.284] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0061.284] GetLastError () returned 0x0
	[0061.284] ReadFile (in: hFile=0x208, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x1204, lpOverlapped=0x0) returned 1
	[0061.286] WriteFile (in: hFile=0x1ac, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x1210, lpOverlapped=0x0) returned 1
	[0061.287] ReadFile (in: hFile=0x208, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.287] WriteFile (in: hFile=0x1ac, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.287] SetEndOfFile (hFile=0x1ac) returned 1
	[0061.287] CloseHandle (hObject=0x1ac) returned 1
	[0061.287] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.287] SetEndOfFile (hFile=0x208) returned 1
	[0061.288] CloseHandle (hObject=0x208) returned 1
	[0061.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.288] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf")) returned 1
	[0061.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 63
	[0061.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 63
	[0061.289] lstrlenW (lpString=".doc") returned 4
	[0061.289] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.289] lstrlenW (lpString=".docx") returned 5
	[0061.289] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.289] lstrlenW (lpString=".pdf") returned 4
	[0061.289] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.289] lstrlenW (lpString=".xls") returned 4
	[0061.289] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.289] lstrlenW (lpString=".xlsx") returned 5
	[0061.289] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.289] lstrlenW (lpString=".ppt") returned 4
	[0061.289] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 63
	[0061.289] lstrlenW (lpString=".zip") returned 4
	[0061.289] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.289] lstrlenW (lpString=".rar") returned 4
	[0061.289] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.289] lstrlenW (lpString=".bz2") returned 4
	[0061.289] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.289] lstrlenW (lpString=".7z") returned 3
	[0061.289] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 63
	[0061.289] lstrlenW (lpString=".dbf") returned 4
	[0061.289] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 63
	[0061.289] lstrlenW (lpString=".1cd") returned 4
	[0061.289] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 63
	[0061.289] lstrlenW (lpString=".jpg") returned 4
	[0061.289] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.290] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.290] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0061.290] GetLastError () returned 0x0
	[0061.290] ReadFile (in: hFile=0x208, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xc48, lpOverlapped=0x0) returned 1
	[0061.293] WriteFile (in: hFile=0x1ac, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xc50, lpOverlapped=0x0) returned 1
	[0061.294] ReadFile (in: hFile=0x208, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.294] WriteFile (in: hFile=0x1ac, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.294] SetEndOfFile (hFile=0x1ac) returned 1
	[0061.294] CloseHandle (hObject=0x1ac) returned 1
	[0061.294] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.294] SetEndOfFile (hFile=0x208) returned 1
	[0061.295] CloseHandle (hObject=0x208) returned 1
	[0061.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.296] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf")) returned 1
	[0061.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 63
	[0061.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 63
	[0061.296] lstrlenW (lpString=".doc") returned 4
	[0061.296] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.296] lstrlenW (lpString=".docx") returned 5
	[0061.296] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.296] lstrlenW (lpString=".pdf") returned 4
	[0061.296] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.296] lstrlenW (lpString=".xls") returned 4
	[0061.296] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.296] lstrlenW (lpString=".xlsx") returned 5
	[0061.296] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.296] lstrlenW (lpString=".ppt") returned 4
	[0061.296] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 63
	[0061.296] lstrlenW (lpString=".zip") returned 4
	[0061.296] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.296] lstrlenW (lpString=".rar") returned 4
	[0061.296] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.296] lstrlenW (lpString=".bz2") returned 4
	[0061.296] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.296] lstrlenW (lpString=".7z") returned 3
	[0061.296] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 63
	[0061.297] lstrlenW (lpString=".dbf") returned 4
	[0061.297] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 63
	[0061.297] lstrlenW (lpString=".1cd") returned 4
	[0061.297] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 63
	[0061.297] lstrlenW (lpString=".jpg") returned 4
	[0061.297] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.297] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.298] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0061.298] GetLastError () returned 0x0
	[0061.298] ReadFile (in: hFile=0x208, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x1df4, lpOverlapped=0x0) returned 1
	[0061.653] WriteFile (in: hFile=0x1ac, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x1e00, lpOverlapped=0x0) returned 1
	[0061.654] ReadFile (in: hFile=0x208, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.654] WriteFile (in: hFile=0x1ac, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.655] SetEndOfFile (hFile=0x1ac) returned 1
	[0061.760] CloseHandle (hObject=0x1ac) returned 1
	[0061.760] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.760] SetEndOfFile (hFile=0x208) returned 1
	[0061.761] CloseHandle (hObject=0x208) returned 1
	[0061.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.761] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf")) returned 1
	[0062.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 63
	[0062.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 63
	[0062.677] lstrlenW (lpString=".doc") returned 4
	[0062.677] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.677] lstrlenW (lpString=".docx") returned 5
	[0062.677] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.677] lstrlenW (lpString=".pdf") returned 4
	[0062.677] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.677] lstrlenW (lpString=".xls") returned 4
	[0062.677] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.677] lstrlenW (lpString=".xlsx") returned 5
	[0062.677] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.677] lstrlenW (lpString=".ppt") returned 4
	[0062.677] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 63
	[0062.677] lstrlenW (lpString=".zip") returned 4
	[0062.677] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.677] lstrlenW (lpString=".rar") returned 4
	[0062.677] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.677] lstrlenW (lpString=".bz2") returned 4
	[0062.677] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.677] lstrlenW (lpString=".7z") returned 3
	[0062.677] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 63
	[0062.677] lstrlenW (lpString=".dbf") returned 4
	[0062.677] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 63
	[0062.677] lstrlenW (lpString=".1cd") returned 4
	[0062.677] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 63
	[0062.677] lstrlenW (lpString=".jpg") returned 4
	[0062.677] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.883] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.889] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0062.898] GetLastError () returned 0x0
	[0062.898] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x12c8, lpOverlapped=0x0) returned 1
	[0062.923] WriteFile (in: hFile=0x22c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x12d0, lpOverlapped=0x0) returned 1
	[0062.924] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.924] WriteFile (in: hFile=0x22c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.924] SetEndOfFile (hFile=0x22c) returned 1
	[0062.925] CloseHandle (hObject=0x22c) returned 1
	[0062.925] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.925] SetEndOfFile (hFile=0x224) returned 1
	[0062.926] CloseHandle (hObject=0x224) returned 1
	[0062.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.926] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf")) returned 1
	[0062.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 63
	[0062.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 63
	[0062.926] lstrlenW (lpString=".doc") returned 4
	[0062.926] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.926] lstrlenW (lpString=".docx") returned 5
	[0062.926] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.926] lstrlenW (lpString=".pdf") returned 4
	[0062.926] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.926] lstrlenW (lpString=".xls") returned 4
	[0062.926] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.926] lstrlenW (lpString=".xlsx") returned 5
	[0062.926] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.926] lstrlenW (lpString=".ppt") returned 4
	[0062.926] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 63
	[0062.927] lstrlenW (lpString=".zip") returned 4
	[0062.927] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.927] lstrlenW (lpString=".rar") returned 4
	[0062.927] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.927] lstrlenW (lpString=".bz2") returned 4
	[0062.927] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.927] lstrlenW (lpString=".7z") returned 3
	[0062.927] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 63
	[0062.927] lstrlenW (lpString=".dbf") returned 4
	[0062.927] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 63
	[0062.927] lstrlenW (lpString=".1cd") returned 4
	[0062.927] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 63
	[0062.927] lstrlenW (lpString=".jpg") returned 4
	[0062.927] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.927] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.927] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0062.928] GetLastError () returned 0x0
	[0062.928] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x9d0e, lpOverlapped=0x0) returned 1
	[0062.930] WriteFile (in: hFile=0x22c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x9d10, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x9d10, lpOverlapped=0x0) returned 1
	[0062.931] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.931] WriteFile (in: hFile=0x22c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.931] SetEndOfFile (hFile=0x22c) returned 1
	[0062.932] CloseHandle (hObject=0x22c) returned 1
	[0062.932] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.932] SetEndOfFile (hFile=0x224) returned 1
	[0062.933] CloseHandle (hObject=0x224) returned 1
	[0062.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.933] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf")) returned 1
	[0062.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 63
	[0062.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 63
	[0062.933] lstrlenW (lpString=".doc") returned 4
	[0062.933] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.933] lstrlenW (lpString=".docx") returned 5
	[0062.933] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.933] lstrlenW (lpString=".pdf") returned 4
	[0062.933] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.933] lstrlenW (lpString=".xls") returned 4
	[0062.933] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.934] lstrlenW (lpString=".xlsx") returned 5
	[0062.934] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.934] lstrlenW (lpString=".ppt") returned 4
	[0062.934] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 63
	[0062.934] lstrlenW (lpString=".zip") returned 4
	[0062.934] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.934] lstrlenW (lpString=".rar") returned 4
	[0062.934] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.934] lstrlenW (lpString=".bz2") returned 4
	[0062.934] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.934] lstrlenW (lpString=".7z") returned 3
	[0062.934] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 63
	[0062.934] lstrlenW (lpString=".dbf") returned 4
	[0062.934] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 63
	[0062.934] lstrlenW (lpString=".1cd") returned 4
	[0062.934] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 63
	[0062.934] lstrlenW (lpString=".jpg") returned 4
	[0062.934] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.934] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.934] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0062.935] GetLastError () returned 0x0
	[0062.935] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0xbaaa, lpOverlapped=0x0) returned 1
	[0062.937] WriteFile (in: hFile=0x22c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xbab0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xbab0, lpOverlapped=0x0) returned 1
	[0062.939] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.939] WriteFile (in: hFile=0x22c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.939] SetEndOfFile (hFile=0x22c) returned 1
	[0062.939] CloseHandle (hObject=0x22c) returned 1
	[0062.939] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.939] SetEndOfFile (hFile=0x224) returned 1
	[0062.940] CloseHandle (hObject=0x224) returned 1
	[0062.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.941] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf")) returned 1
	[0062.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 63
	[0062.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 63
	[0062.941] lstrlenW (lpString=".doc") returned 4
	[0062.941] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.941] lstrlenW (lpString=".docx") returned 5
	[0062.941] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.941] lstrlenW (lpString=".pdf") returned 4
	[0062.941] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.941] lstrlenW (lpString=".xls") returned 4
	[0062.941] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.941] lstrlenW (lpString=".xlsx") returned 5
	[0062.941] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.941] lstrlenW (lpString=".ppt") returned 4
	[0062.941] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 63
	[0062.941] lstrlenW (lpString=".zip") returned 4
	[0062.942] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.942] lstrlenW (lpString=".rar") returned 4
	[0062.942] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.942] lstrlenW (lpString=".bz2") returned 4
	[0062.942] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.942] lstrlenW (lpString=".7z") returned 3
	[0062.942] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 63
	[0062.942] lstrlenW (lpString=".dbf") returned 4
	[0062.942] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 63
	[0062.942] lstrlenW (lpString=".1cd") returned 4
	[0062.942] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 63
	[0062.942] lstrlenW (lpString=".jpg") returned 4
	[0062.942] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.942] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.942] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0062.943] GetLastError () returned 0x0
	[0062.943] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x38cc, lpOverlapped=0x0) returned 1
	[0062.945] WriteFile (in: hFile=0x22c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x38d0, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x38d0, lpOverlapped=0x0) returned 1
	[0062.946] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.946] WriteFile (in: hFile=0x22c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.946] SetEndOfFile (hFile=0x22c) returned 1
	[0062.946] CloseHandle (hObject=0x22c) returned 1
	[0062.946] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.946] SetEndOfFile (hFile=0x224) returned 1
	[0062.947] CloseHandle (hObject=0x224) returned 1
	[0062.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.947] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf")) returned 1
	[0062.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 63
	[0062.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 63
	[0062.947] lstrlenW (lpString=".doc") returned 4
	[0062.947] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.948] lstrlenW (lpString=".docx") returned 5
	[0062.948] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.948] lstrlenW (lpString=".pdf") returned 4
	[0062.948] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.948] lstrlenW (lpString=".xls") returned 4
	[0062.948] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.948] lstrlenW (lpString=".xlsx") returned 5
	[0062.948] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.948] lstrlenW (lpString=".ppt") returned 4
	[0062.948] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 63
	[0062.948] lstrlenW (lpString=".zip") returned 4
	[0062.948] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.948] lstrlenW (lpString=".rar") returned 4
	[0062.948] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.948] lstrlenW (lpString=".bz2") returned 4
	[0062.948] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.948] lstrlenW (lpString=".7z") returned 3
	[0062.948] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 63
	[0062.948] lstrlenW (lpString=".dbf") returned 4
	[0062.948] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 63
	[0062.948] lstrlenW (lpString=".1cd") returned 4
	[0062.948] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 63
	[0062.948] lstrlenW (lpString=".jpg") returned 4
	[0062.948] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.949] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.949] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0062.949] GetLastError () returned 0x0
	[0062.949] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x504a, lpOverlapped=0x0) returned 1
	[0062.952] WriteFile (in: hFile=0x22c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x5050, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x5050, lpOverlapped=0x0) returned 1
	[0062.953] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.953] WriteFile (in: hFile=0x22c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.953] SetEndOfFile (hFile=0x22c) returned 1
	[0062.953] CloseHandle (hObject=0x22c) returned 1
	[0062.953] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.953] SetEndOfFile (hFile=0x224) returned 1
	[0062.957] CloseHandle (hObject=0x224) returned 1
	[0062.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.957] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf")) returned 1
	[0062.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 63
	[0062.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 63
	[0062.957] lstrlenW (lpString=".doc") returned 4
	[0062.957] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.957] lstrlenW (lpString=".docx") returned 5
	[0062.957] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.957] lstrlenW (lpString=".pdf") returned 4
	[0062.957] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.958] lstrlenW (lpString=".xls") returned 4
	[0062.958] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.958] lstrlenW (lpString=".xlsx") returned 5
	[0062.958] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.958] lstrlenW (lpString=".ppt") returned 4
	[0062.958] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 63
	[0062.958] lstrlenW (lpString=".zip") returned 4
	[0062.958] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.958] lstrlenW (lpString=".rar") returned 4
	[0062.958] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.958] lstrlenW (lpString=".bz2") returned 4
	[0062.958] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.958] lstrlenW (lpString=".7z") returned 3
	[0062.958] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 63
	[0062.958] lstrlenW (lpString=".dbf") returned 4
	[0062.958] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 63
	[0062.958] lstrlenW (lpString=".1cd") returned 4
	[0062.958] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 63
	[0062.958] lstrlenW (lpString=".jpg") returned 4
	[0062.958] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.958] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.959] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0062.959] GetLastError () returned 0x0
	[0062.959] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x1f1e, lpOverlapped=0x0) returned 1
	[0063.124] WriteFile (in: hFile=0x22c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0x1f20, lpOverlapped=0x0) returned 1
	[0063.134] ReadFile (in: hFile=0x224, lpBuffer=0x8230020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7a1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesRead=0x7a1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.134] WriteFile (in: hFile=0x22c, lpBuffer=0x8230020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7a1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8230020*, lpNumberOfBytesWritten=0x7a1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.135] SetEndOfFile (hFile=0x22c) returned 1
	[0063.633] CloseHandle (hObject=0x22c) returned 1
	[0063.633] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7a1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.633] SetEndOfFile (hFile=0x224) returned 1
	[0063.636] CloseHandle (hObject=0x224) returned 1
	[0063.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.637] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf")) 

Thread:
	id = 12
	os_tid = 0xa40

	[0034.805] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x8140050
	[0034.806] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x8150058
	[0034.806] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0920
	[0034.806] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x6) returned 0x53dd6e8
	[0034.806] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0968
	[0034.806] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x100000) returned 0x8480020
	[0034.806] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0980
	[0034.806] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0980, Size=0x20) returned 0x53c6200
	[0034.806] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0980
	[0034.806] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0980, Size=0x20) returned 0x53c6228
	[0034.806] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0034.807] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0034.807] Wow64DisableWow64FsRedirection (in: OldValue=0x7b1ff58 | out: OldValue=0x7b1ff58*=0x0) returned 1
	[0034.807] lstrlenW (lpString="kernel32.dll") returned 12
	[0034.807] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6200 | out: hHeap=0x5350000) returned 1
	[0034.807] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0034.807] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6228 | out: hHeap=0x5350000) returned 1
	[0034.807] Sleep (dwMilliseconds=0x64) 
	[0035.155] Sleep (dwMilliseconds=0x64) 
	[0035.807] Sleep (dwMilliseconds=0x64) 
	[0036.088] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.088] lstrlenW (lpString="ExcelMUI.xml") returned 12
	[0036.088] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0036.263] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1565) returned 1
	[0036.263] CloseHandle (hObject=0x190) returned 1
	[0036.263] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 0x2020
	[0036.263] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.263] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0036.263] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.263] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.263] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0036.264] GetLastError () returned 0x0
	[0036.264] ReadFile (in: hFile=0x190, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x61d, lpOverlapped=0x0) returned 1
	[0036.277] WriteFile (in: hFile=0x1b4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x620, lpOverlapped=0x0) returned 1
	[0036.278] ReadFile (in: hFile=0x190, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.278] WriteFile (in: hFile=0x1b4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0036.278] SetEndOfFile (hFile=0x1b4) returned 1
	[0036.278] CloseHandle (hObject=0x1b4) returned 1
	[0036.279] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.279] SetEndOfFile (hFile=0x190) returned 1
	[0036.280] CloseHandle (hObject=0x190) returned 1
	[0036.280] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.280] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 1
	[0036.281] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0036.281] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0036.281] lstrlenW (lpString=".doc") returned 4
	[0036.281] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.281] lstrlenW (lpString=".docx") returned 5
	[0036.281] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.281] lstrlenW (lpString=".pdf") returned 4
	[0036.281] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.281] lstrlenW (lpString=".xls") returned 4
	[0036.281] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.281] lstrlenW (lpString=".xlsx") returned 5
	[0036.281] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.281] lstrlenW (lpString=".ppt") returned 4
	[0036.281] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.281] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0036.281] lstrlenW (lpString=".zip") returned 4
	[0036.281] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.281] lstrlenW (lpString=".rar") returned 4
	[0036.281] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.281] lstrlenW (lpString=".bz2") returned 4
	[0036.281] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.281] lstrlenW (lpString=".7z") returned 3
	[0036.281] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.281] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0036.281] lstrlenW (lpString=".dbf") returned 4
	[0036.281] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.281] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0036.281] lstrlenW (lpString=".1cd") returned 4
	[0036.281] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.281] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0036.281] lstrlenW (lpString=".jpg") returned 4
	[0036.281] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.282] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0036.282] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0036.282] lstrlenW (lpString=".doc") returned 4
	[0036.282] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.282] lstrlenW (lpString=".docx") returned 5
	[0036.282] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.282] lstrlenW (lpString=".pdf") returned 4
	[0036.282] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.282] lstrlenW (lpString=".xls") returned 4
	[0036.282] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.282] lstrlenW (lpString=".xlsx") returned 5
	[0036.282] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.282] lstrlenW (lpString=".ppt") returned 4
	[0036.282] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.282] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0036.282] lstrlenW (lpString=".zip") returned 4
	[0036.282] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.282] lstrlenW (lpString=".rar") returned 4
	[0036.282] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.282] lstrlenW (lpString=".bz2") returned 4
	[0036.282] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.282] lstrlenW (lpString=".7z") returned 3
	[0036.282] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.282] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0036.282] lstrlenW (lpString=".dbf") returned 4
	[0036.282] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.282] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0036.282] lstrlenW (lpString=".1cd") returned 4
	[0036.282] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.282] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 75
	[0036.282] lstrlenW (lpString=".jpg") returned 4
	[0036.282] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.283] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.283] lstrlenW (lpString="Proof.xml") returned 9
	[0036.283] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0036.283] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1347) returned 1
	[0036.284] CloseHandle (hObject=0x190) returned 1
	[0036.284] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml")) returned 0x2020
	[0036.284] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.284] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0036.284] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.284] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.284] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0036.284] GetLastError () returned 0x0
	[0036.284] ReadFile (in: hFile=0x190, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x543, lpOverlapped=0x0) returned 1
	[0036.286] WriteFile (in: hFile=0x1b4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x550, lpOverlapped=0x0) returned 1
	[0036.287] ReadFile (in: hFile=0x190, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.287] WriteFile (in: hFile=0x1b4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.287] SetEndOfFile (hFile=0x1b4) returned 1
	[0036.287] CloseHandle (hObject=0x1b4) returned 1
	[0036.287] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.287] SetEndOfFile (hFile=0x190) returned 1
	[0036.288] CloseHandle (hObject=0x190) returned 1
	[0036.288] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.288] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml")) returned 1
	[0036.289] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81
	[0036.289] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81
	[0036.289] lstrlenW (lpString=".doc") returned 4
	[0036.289] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.289] lstrlenW (lpString=".docx") returned 5
	[0036.289] lstrcmpiW (lpString1=".docx", lpString2="f.xml") returned -1
	[0036.289] lstrlenW (lpString=".pdf") returned 4
	[0036.289] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.289] lstrlenW (lpString=".xls") returned 4
	[0036.289] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.289] lstrlenW (lpString=".xlsx") returned 5
	[0036.289] lstrcmpiW (lpString1=".xlsx", lpString2="f.xml") returned -1
	[0036.289] lstrlenW (lpString=".ppt") returned 4
	[0036.289] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.289] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81
	[0036.289] lstrlenW (lpString=".zip") returned 4
	[0036.289] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.289] lstrlenW (lpString=".rar") returned 4
	[0036.289] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.289] lstrlenW (lpString=".bz2") returned 4
	[0036.289] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.289] lstrlenW (lpString=".7z") returned 3
	[0036.289] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.289] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81
	[0036.289] lstrlenW (lpString=".dbf") returned 4
	[0036.289] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.289] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81
	[0036.289] lstrlenW (lpString=".1cd") returned 4
	[0036.290] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.290] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81
	[0036.290] lstrlenW (lpString=".jpg") returned 4
	[0036.290] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.290] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81
	[0036.290] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81
	[0036.290] lstrlenW (lpString=".doc") returned 4
	[0036.290] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.290] lstrlenW (lpString=".docx") returned 5
	[0036.290] lstrcmpiW (lpString1=".docx", lpString2="f.xml") returned -1
	[0036.290] lstrlenW (lpString=".pdf") returned 4
	[0036.290] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.290] lstrlenW (lpString=".xls") returned 4
	[0036.290] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.290] lstrlenW (lpString=".xlsx") returned 5
	[0036.290] lstrcmpiW (lpString1=".xlsx", lpString2="f.xml") returned -1
	[0036.290] lstrlenW (lpString=".ppt") returned 4
	[0036.290] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.290] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81
	[0036.290] lstrlenW (lpString=".zip") returned 4
	[0036.290] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.290] lstrlenW (lpString=".rar") returned 4
	[0036.290] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.290] lstrlenW (lpString=".bz2") returned 4
	[0036.290] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.290] lstrlenW (lpString=".7z") returned 3
	[0036.290] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.290] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81
	[0036.290] lstrlenW (lpString=".dbf") returned 4
	[0036.290] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.290] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81
	[0036.290] lstrlenW (lpString=".1cd") returned 4
	[0036.291] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.291] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 81
	[0036.291] lstrlenW (lpString=".jpg") returned 4
	[0036.291] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.291] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.291] lstrlenW (lpString="Proof.xml") returned 9
	[0036.291] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0036.291] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1457) returned 1
	[0036.291] CloseHandle (hObject=0x190) returned 1
	[0036.291] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml")) returned 0x2020
	[0036.291] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.291] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0036.291] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.291] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.292] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0036.292] GetLastError () returned 0x0
	[0036.292] ReadFile (in: hFile=0x190, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x5b1, lpOverlapped=0x0) returned 1
	[0036.294] WriteFile (in: hFile=0x1b4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x5c0, lpOverlapped=0x0) returned 1
	[0036.294] ReadFile (in: hFile=0x190, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.294] WriteFile (in: hFile=0x1b4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.295] SetEndOfFile (hFile=0x1b4) returned 1
	[0036.295] CloseHandle (hObject=0x1b4) returned 1
	[0036.295] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.295] SetEndOfFile (hFile=0x190) returned 1
	[0036.296] CloseHandle (hObject=0x190) returned 1
	[0036.296] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.296] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml")) returned 1
	[0036.297] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81
	[0036.297] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81
	[0036.297] lstrlenW (lpString=".doc") returned 4
	[0036.297] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.297] lstrlenW (lpString=".docx") returned 5
	[0036.297] lstrcmpiW (lpString1=".docx", lpString2="f.xml") returned -1
	[0036.297] lstrlenW (lpString=".pdf") returned 4
	[0036.297] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.297] lstrlenW (lpString=".xls") returned 4
	[0036.297] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.297] lstrlenW (lpString=".xlsx") returned 5
	[0036.297] lstrcmpiW (lpString1=".xlsx", lpString2="f.xml") returned -1
	[0036.297] lstrlenW (lpString=".ppt") returned 4
	[0036.297] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.297] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81
	[0036.297] lstrlenW (lpString=".zip") returned 4
	[0036.297] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.297] lstrlenW (lpString=".rar") returned 4
	[0036.297] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.297] lstrlenW (lpString=".bz2") returned 4
	[0036.297] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.297] lstrlenW (lpString=".7z") returned 3
	[0036.297] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.297] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81
	[0036.297] lstrlenW (lpString=".dbf") returned 4
	[0036.297] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.297] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81
	[0036.297] lstrlenW (lpString=".1cd") returned 4
	[0036.297] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.297] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81
	[0036.297] lstrlenW (lpString=".jpg") returned 4
	[0036.297] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.298] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81
	[0036.298] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81
	[0036.298] lstrlenW (lpString=".doc") returned 4
	[0036.298] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.298] lstrlenW (lpString=".docx") returned 5
	[0036.298] lstrcmpiW (lpString1=".docx", lpString2="f.xml") returned -1
	[0036.298] lstrlenW (lpString=".pdf") returned 4
	[0036.298] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.298] lstrlenW (lpString=".xls") returned 4
	[0036.298] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.298] lstrlenW (lpString=".xlsx") returned 5
	[0036.298] lstrcmpiW (lpString1=".xlsx", lpString2="f.xml") returned -1
	[0036.298] lstrlenW (lpString=".ppt") returned 4
	[0036.298] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.298] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81
	[0036.298] lstrlenW (lpString=".zip") returned 4
	[0036.298] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.298] lstrlenW (lpString=".rar") returned 4
	[0036.298] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.298] lstrlenW (lpString=".bz2") returned 4
	[0036.298] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.298] lstrlenW (lpString=".7z") returned 3
	[0036.298] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.298] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81
	[0036.298] lstrlenW (lpString=".dbf") returned 4
	[0036.298] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.298] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81
	[0036.298] lstrlenW (lpString=".1cd") returned 4
	[0036.298] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.298] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 81
	[0036.298] lstrlenW (lpString=".jpg") returned 4
	[0036.298] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.299] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.299] lstrlenW (lpString="Proof.xml") returned 9
	[0036.299] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0036.299] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1458) returned 1
	[0036.299] CloseHandle (hObject=0x190) returned 1
	[0036.299] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml")) returned 0x2020
	[0036.299] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.299] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0036.299] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.299] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.299] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0036.300] GetLastError () returned 0x0
	[0036.300] ReadFile (in: hFile=0x190, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x5b2, lpOverlapped=0x0) returned 1
	[0036.662] WriteFile (in: hFile=0x1b4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x5c0, lpOverlapped=0x0) returned 1
	[0036.663] ReadFile (in: hFile=0x190, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.663] WriteFile (in: hFile=0x1b4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.663] SetEndOfFile (hFile=0x1b4) returned 1
	[0036.663] CloseHandle (hObject=0x1b4) returned 1
	[0036.664] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.664] SetEndOfFile (hFile=0x190) returned 1
	[0036.665] CloseHandle (hObject=0x190) returned 1
	[0036.665] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.665] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml")) returned 1
	[0036.665] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81
	[0036.665] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81
	[0036.665] lstrlenW (lpString=".doc") returned 4
	[0036.665] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.665] lstrlenW (lpString=".docx") returned 5
	[0036.665] lstrcmpiW (lpString1=".docx", lpString2="f.xml") returned -1
	[0036.665] lstrlenW (lpString=".pdf") returned 4
	[0036.665] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.665] lstrlenW (lpString=".xls") returned 4
	[0036.665] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.665] lstrlenW (lpString=".xlsx") returned 5
	[0036.666] lstrcmpiW (lpString1=".xlsx", lpString2="f.xml") returned -1
	[0036.666] lstrlenW (lpString=".ppt") returned 4
	[0036.666] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.666] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81
	[0036.666] lstrlenW (lpString=".zip") returned 4
	[0036.666] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.666] lstrlenW (lpString=".rar") returned 4
	[0036.666] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.666] lstrlenW (lpString=".bz2") returned 4
	[0036.666] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.666] lstrlenW (lpString=".7z") returned 3
	[0036.666] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.666] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81
	[0036.666] lstrlenW (lpString=".dbf") returned 4
	[0036.666] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.666] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81
	[0036.666] lstrlenW (lpString=".1cd") returned 4
	[0036.666] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.666] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81
	[0036.666] lstrlenW (lpString=".jpg") returned 4
	[0036.666] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.666] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81
	[0036.666] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81
	[0036.666] lstrlenW (lpString=".doc") returned 4
	[0036.666] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.666] lstrlenW (lpString=".docx") returned 5
	[0036.666] lstrcmpiW (lpString1=".docx", lpString2="f.xml") returned -1
	[0036.666] lstrlenW (lpString=".pdf") returned 4
	[0036.666] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.666] lstrlenW (lpString=".xls") returned 4
	[0036.666] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.666] lstrlenW (lpString=".xlsx") returned 5
	[0036.667] lstrcmpiW (lpString1=".xlsx", lpString2="f.xml") returned -1
	[0036.667] lstrlenW (lpString=".ppt") returned 4
	[0036.667] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.667] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81
	[0036.667] lstrlenW (lpString=".zip") returned 4
	[0036.667] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.667] lstrlenW (lpString=".rar") returned 4
	[0036.667] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.667] lstrlenW (lpString=".bz2") returned 4
	[0036.667] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.667] lstrlenW (lpString=".7z") returned 3
	[0036.667] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.667] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81
	[0036.667] lstrlenW (lpString=".dbf") returned 4
	[0036.667] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.667] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81
	[0036.667] lstrlenW (lpString=".1cd") returned 4
	[0036.667] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.667] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 81
	[0036.667] lstrlenW (lpString=".jpg") returned 4
	[0036.667] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.667] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.667] lstrlenW (lpString="ProjectMUI.xml") returned 14
	[0036.667] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4
	[0036.870] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1452) returned 1
	[0036.870] CloseHandle (hObject=0x1c4) returned 1
	[0036.881] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml")) returned 0x2020
	[0036.881] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.886] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.886] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.886] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.886] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0036.887] GetLastError () returned 0x0
	[0036.887] ReadFile (in: hFile=0x188, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x5ac, lpOverlapped=0x0) returned 1
	[0036.934] WriteFile (in: hFile=0x1b0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x5b0, lpOverlapped=0x0) returned 1
	[0036.935] ReadFile (in: hFile=0x188, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.935] WriteFile (in: hFile=0x1b0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xf0, lpOverlapped=0x0) returned 1
	[0036.935] SetEndOfFile (hFile=0x1b0) returned 1
	[0036.935] CloseHandle (hObject=0x1b0) returned 1
	[0036.936] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.936] SetEndOfFile (hFile=0x188) returned 1
	[0036.937] CloseHandle (hObject=0x188) returned 1
	[0036.937] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.937] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml")) returned 1
	[0036.937] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0036.937] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0036.937] lstrlenW (lpString=".doc") returned 4
	[0036.937] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.938] lstrlenW (lpString=".docx") returned 5
	[0036.938] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.938] lstrlenW (lpString=".pdf") returned 4
	[0036.938] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.938] lstrlenW (lpString=".xls") returned 4
	[0036.938] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.938] lstrlenW (lpString=".xlsx") returned 5
	[0036.938] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.938] lstrlenW (lpString=".ppt") returned 4
	[0036.938] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.938] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0036.938] lstrlenW (lpString=".zip") returned 4
	[0036.938] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.938] lstrlenW (lpString=".rar") returned 4
	[0036.938] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.938] lstrlenW (lpString=".bz2") returned 4
	[0036.938] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.938] lstrlenW (lpString=".7z") returned 3
	[0036.938] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.938] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0036.938] lstrlenW (lpString=".dbf") returned 4
	[0036.938] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.938] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0036.938] lstrlenW (lpString=".1cd") returned 4
	[0036.938] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.938] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0036.938] lstrlenW (lpString=".jpg") returned 4
	[0036.938] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.938] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0036.938] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0036.938] lstrlenW (lpString=".doc") returned 4
	[0036.938] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.939] lstrlenW (lpString=".docx") returned 5
	[0036.939] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.939] lstrlenW (lpString=".pdf") returned 4
	[0036.939] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.939] lstrlenW (lpString=".xls") returned 4
	[0036.939] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.939] lstrlenW (lpString=".xlsx") returned 5
	[0036.939] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.939] lstrlenW (lpString=".ppt") returned 4
	[0036.939] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.939] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0036.939] lstrlenW (lpString=".zip") returned 4
	[0036.939] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.939] lstrlenW (lpString=".rar") returned 4
	[0036.939] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.939] lstrlenW (lpString=".bz2") returned 4
	[0036.939] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.939] lstrlenW (lpString=".7z") returned 3
	[0036.939] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.939] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0036.939] lstrlenW (lpString=".dbf") returned 4
	[0036.939] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.939] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0036.939] lstrlenW (lpString=".1cd") returned 4
	[0036.939] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.939] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 77
	[0036.939] lstrlenW (lpString=".jpg") returned 4
	[0036.939] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.939] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.940] lstrlenW (lpString="AccessMUI.xml") returned 13
	[0036.940] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.962] GetFileSizeEx (in: hFile=0x188, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1349) returned 1
	[0036.962] CloseHandle (hObject=0x188) returned 1
	[0036.962] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml")) returned 0x2020
	[0036.962] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.962] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.963] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.963] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.963] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0036.963] GetLastError () returned 0x0
	[0036.963] ReadFile (in: hFile=0x188, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x545, lpOverlapped=0x0) returned 1
	[0036.980] WriteFile (in: hFile=0x1b0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x550, lpOverlapped=0x0) returned 1
	[0036.981] ReadFile (in: hFile=0x188, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.981] WriteFile (in: hFile=0x1b0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xee, lpOverlapped=0x0) returned 1
	[0036.981] SetEndOfFile (hFile=0x1b0) returned 1
	[0036.981] CloseHandle (hObject=0x1b0) returned 1
	[0036.982] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.982] SetEndOfFile (hFile=0x188) returned 1
	[0036.983] CloseHandle (hObject=0x188) returned 1
	[0036.983] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.983] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml")) returned 1
	[0036.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0036.983] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0036.983] lstrlenW (lpString=".doc") returned 4
	[0036.983] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.983] lstrlenW (lpString=".docx") returned 5
	[0036.983] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.983] lstrlenW (lpString=".pdf") returned 4
	[0036.983] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.983] lstrlenW (lpString=".xls") returned 4
	[0036.983] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.984] lstrlenW (lpString=".xlsx") returned 5
	[0036.984] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.984] lstrlenW (lpString=".ppt") returned 4
	[0036.984] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.984] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0036.984] lstrlenW (lpString=".zip") returned 4
	[0036.984] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.984] lstrlenW (lpString=".rar") returned 4
	[0036.984] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.984] lstrlenW (lpString=".bz2") returned 4
	[0036.984] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.984] lstrlenW (lpString=".7z") returned 3
	[0036.984] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.984] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0036.984] lstrlenW (lpString=".dbf") returned 4
	[0036.984] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.984] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0036.984] lstrlenW (lpString=".1cd") returned 4
	[0036.984] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.984] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0036.984] lstrlenW (lpString=".jpg") returned 4
	[0036.984] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.984] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0036.984] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0036.984] lstrlenW (lpString=".doc") returned 4
	[0036.984] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.984] lstrlenW (lpString=".docx") returned 5
	[0036.984] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.984] lstrlenW (lpString=".pdf") returned 4
	[0036.984] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.984] lstrlenW (lpString=".xls") returned 4
	[0036.984] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.985] lstrlenW (lpString=".xlsx") returned 5
	[0036.985] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.985] lstrlenW (lpString=".ppt") returned 4
	[0036.985] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.985] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0036.985] lstrlenW (lpString=".zip") returned 4
	[0036.985] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.985] lstrlenW (lpString=".rar") returned 4
	[0036.985] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.985] lstrlenW (lpString=".bz2") returned 4
	[0036.985] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.985] lstrlenW (lpString=".7z") returned 3
	[0036.985] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.985] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0036.985] lstrlenW (lpString=".dbf") returned 4
	[0036.985] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.985] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0036.985] lstrlenW (lpString=".1cd") returned 4
	[0036.985] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.985] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 89
	[0036.985] lstrlenW (lpString=".jpg") returned 4
	[0036.985] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.985] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.985] lstrlenW (lpString="branding.xml") returned 12
	[0036.985] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.986] GetFileSizeEx (in: hFile=0x188, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=596341) returned 1
	[0036.986] CloseHandle (hObject=0x188) returned 1
	[0036.986] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml")) returned 0x2020
	[0036.986] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.986] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0036.986] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.986] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.986] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0036.986] GetLastError () returned 0x0
	[0036.986] ReadFile (in: hFile=0x188, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x91975, lpOverlapped=0x0) returned 1
	[0037.026] WriteFile (in: hFile=0x1b0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x91980, lpOverlapped=0x0) returned 1
	[0037.490] ReadFile (in: hFile=0x188, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0037.490] WriteFile (in: hFile=0x1b0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0037.490] SetEndOfFile (hFile=0x1b0) returned 1
	[0037.490] CloseHandle (hObject=0x1b0) returned 1
	[0037.496] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.496] SetEndOfFile (hFile=0x188) returned 1
	[0037.501] CloseHandle (hObject=0x188) returned 1
	[0037.501] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0037.501] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml")) returned 1
	[0037.502] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88
	[0037.502] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88
	[0037.502] lstrlenW (lpString=".doc") returned 4
	[0037.502] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.502] lstrlenW (lpString=".docx") returned 5
	[0037.502] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1
	[0037.502] lstrlenW (lpString=".pdf") returned 4
	[0037.502] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.502] lstrlenW (lpString=".xls") returned 4
	[0037.502] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.502] lstrlenW (lpString=".xlsx") returned 5
	[0037.502] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1
	[0037.502] lstrlenW (lpString=".ppt") returned 4
	[0037.502] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.502] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88
	[0037.502] lstrlenW (lpString=".zip") returned 4
	[0037.502] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.502] lstrlenW (lpString=".rar") returned 4
	[0037.502] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.502] lstrlenW (lpString=".bz2") returned 4
	[0037.502] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.502] lstrlenW (lpString=".7z") returned 3
	[0037.502] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.503] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88
	[0037.503] lstrlenW (lpString=".dbf") returned 4
	[0037.503] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.503] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88
	[0037.503] lstrlenW (lpString=".1cd") returned 4
	[0037.503] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.503] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88
	[0037.503] lstrlenW (lpString=".jpg") returned 4
	[0037.503] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.503] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88
	[0037.503] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88
	[0037.503] lstrlenW (lpString=".doc") returned 4
	[0037.503] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.503] lstrlenW (lpString=".docx") returned 5
	[0037.503] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1
	[0037.503] lstrlenW (lpString=".pdf") returned 4
	[0037.503] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.503] lstrlenW (lpString=".xls") returned 4
	[0037.503] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.503] lstrlenW (lpString=".xlsx") returned 5
	[0037.503] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1
	[0037.503] lstrlenW (lpString=".ppt") returned 4
	[0037.503] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.503] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88
	[0037.503] lstrlenW (lpString=".zip") returned 4
	[0037.503] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.503] lstrlenW (lpString=".rar") returned 4
	[0037.503] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.503] lstrlenW (lpString=".bz2") returned 4
	[0037.503] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.503] lstrlenW (lpString=".7z") returned 3
	[0037.503] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.504] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88
	[0037.504] lstrlenW (lpString=".dbf") returned 4
	[0037.504] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.504] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88
	[0037.504] lstrlenW (lpString=".1cd") returned 4
	[0037.504] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.504] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 88
	[0037.504] lstrlenW (lpString=".jpg") returned 4
	[0037.504] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.504] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0037.504] lstrlenW (lpString="Office32WW.xml") returned 14
	[0037.504] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0038.211] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=4274) returned 1
	[0038.211] CloseHandle (hObject=0x1b0) returned 1
	[0038.211] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020
	[0038.211] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.211] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0038.211] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.211] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.211] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0038.212] GetLastError () returned 0x0
	[0038.212] ReadFile (in: hFile=0x1b0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x10b2, lpOverlapped=0x0) returned 1
	[0038.221] WriteFile (in: hFile=0x1d8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x10c0, lpOverlapped=0x0) returned 1
	[0038.222] ReadFile (in: hFile=0x1b0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0038.222] WriteFile (in: hFile=0x1d8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xf0, lpOverlapped=0x0) returned 1
	[0038.222] SetEndOfFile (hFile=0x1d8) returned 1
	[0038.222] CloseHandle (hObject=0x1d8) returned 1
	[0038.223] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.223] SetEndOfFile (hFile=0x1b0) returned 1
	[0038.224] CloseHandle (hObject=0x1b0) returned 1
	[0038.224] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0038.224] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1
	[0038.224] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.224] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.224] lstrlenW (lpString=".doc") returned 4
	[0038.224] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.224] lstrlenW (lpString=".docx") returned 5
	[0038.224] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1
	[0038.224] lstrlenW (lpString=".pdf") returned 4
	[0038.224] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.224] lstrlenW (lpString=".xls") returned 4
	[0038.224] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.224] lstrlenW (lpString=".xlsx") returned 5
	[0038.224] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1
	[0038.224] lstrlenW (lpString=".ppt") returned 4
	[0038.224] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.224] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.225] lstrlenW (lpString=".zip") returned 4
	[0038.225] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.225] lstrlenW (lpString=".rar") returned 4
	[0038.225] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.225] lstrlenW (lpString=".bz2") returned 4
	[0038.225] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.225] lstrlenW (lpString=".7z") returned 3
	[0038.225] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.225] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.225] lstrlenW (lpString=".dbf") returned 4
	[0038.225] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.225] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.225] lstrlenW (lpString=".1cd") returned 4
	[0038.225] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.225] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.225] lstrlenW (lpString=".jpg") returned 4
	[0038.225] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.225] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.225] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.225] lstrlenW (lpString=".doc") returned 4
	[0038.225] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.225] lstrlenW (lpString=".docx") returned 5
	[0038.225] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1
	[0038.225] lstrlenW (lpString=".pdf") returned 4
	[0038.225] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.225] lstrlenW (lpString=".xls") returned 4
	[0038.225] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.225] lstrlenW (lpString=".xlsx") returned 5
	[0038.225] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1
	[0038.225] lstrlenW (lpString=".ppt") returned 4
	[0038.225] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.225] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.225] lstrlenW (lpString=".zip") returned 4
	[0038.226] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.226] lstrlenW (lpString=".rar") returned 4
	[0038.226] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.226] lstrlenW (lpString=".bz2") returned 4
	[0038.226] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.226] lstrlenW (lpString=".7z") returned 3
	[0038.226] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.226] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.226] lstrlenW (lpString=".dbf") returned 4
	[0038.226] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.226] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.226] lstrlenW (lpString=".1cd") returned 4
	[0038.226] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.226] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 77
	[0038.226] lstrlenW (lpString=".jpg") returned 4
	[0038.226] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.226] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0038.226] lstrlenW (lpString="VisiorWW.xml") returned 12
	[0038.226] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0038.227] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=8723) returned 1
	[0038.227] CloseHandle (hObject=0x1b0) returned 1
	[0038.228] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml")) returned 0x2020
	[0038.228] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.228] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0038.229] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.229] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.229] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0038.229] GetLastError () returned 0x0
	[0038.229] ReadFile (in: hFile=0x1b0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x2213, lpOverlapped=0x0) returned 1
	[0038.240] WriteFile (in: hFile=0x1d8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x2220, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x2220, lpOverlapped=0x0) returned 1
	[0038.241] ReadFile (in: hFile=0x1b0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0038.241] WriteFile (in: hFile=0x1d8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0038.241] SetEndOfFile (hFile=0x1d8) returned 1
	[0038.241] CloseHandle (hObject=0x1d8) returned 1
	[0038.242] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.242] SetEndOfFile (hFile=0x1b0) returned 1
	[0038.243] CloseHandle (hObject=0x1b0) returned 1
	[0038.243] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0038.243] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml")) returned 1
	[0038.243] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75
	[0038.243] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75
	[0038.244] lstrlenW (lpString=".doc") returned 4
	[0038.244] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.244] lstrlenW (lpString=".docx") returned 5
	[0038.244] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1
	[0038.244] lstrlenW (lpString=".pdf") returned 4
	[0038.244] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.244] lstrlenW (lpString=".xls") returned 4
	[0038.244] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.244] lstrlenW (lpString=".xlsx") returned 5
	[0038.244] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1
	[0038.244] lstrlenW (lpString=".ppt") returned 4
	[0038.244] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.244] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75
	[0038.244] lstrlenW (lpString=".zip") returned 4
	[0038.244] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.244] lstrlenW (lpString=".rar") returned 4
	[0038.244] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.244] lstrlenW (lpString=".bz2") returned 4
	[0038.244] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.244] lstrlenW (lpString=".7z") returned 3
	[0038.244] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.244] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75
	[0038.244] lstrlenW (lpString=".dbf") returned 4
	[0038.244] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.244] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75
	[0038.244] lstrlenW (lpString=".1cd") returned 4
	[0038.244] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.244] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75
	[0038.244] lstrlenW (lpString=".jpg") returned 4
	[0038.244] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.244] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75
	[0038.244] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75
	[0038.244] lstrlenW (lpString=".doc") returned 4
	[0038.245] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.245] lstrlenW (lpString=".docx") returned 5
	[0038.245] lstrcmpiW (lpString1=".docx", lpString2="W.xml") returned -1
	[0038.245] lstrlenW (lpString=".pdf") returned 4
	[0038.245] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.245] lstrlenW (lpString=".xls") returned 4
	[0038.245] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.245] lstrlenW (lpString=".xlsx") returned 5
	[0038.245] lstrcmpiW (lpString1=".xlsx", lpString2="W.xml") returned -1
	[0038.245] lstrlenW (lpString=".ppt") returned 4
	[0038.245] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.245] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75
	[0038.245] lstrlenW (lpString=".zip") returned 4
	[0038.245] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.245] lstrlenW (lpString=".rar") returned 4
	[0038.245] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.245] lstrlenW (lpString=".bz2") returned 4
	[0038.245] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.245] lstrlenW (lpString=".7z") returned 3
	[0038.245] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.245] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75
	[0038.245] lstrlenW (lpString=".dbf") returned 4
	[0038.245] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.245] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75
	[0038.245] lstrlenW (lpString=".1cd") returned 4
	[0038.245] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.245] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 75
	[0038.245] lstrlenW (lpString=".jpg") returned 4
	[0038.245] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.245] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0038.246] lstrlenW (lpString="MS.GIF") returned 6
	[0038.246] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0038.246] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1069) returned 1
	[0038.246] CloseHandle (hObject=0x1b0) returned 1
	[0038.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif")) returned 0x20
	[0038.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.246] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0038.246] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.246] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.247] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0038.247] GetLastError () returned 0x0
	[0038.247] ReadFile (in: hFile=0x1b0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x42d, lpOverlapped=0x0) returned 1
	[0038.255] WriteFile (in: hFile=0x1d8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x430, lpOverlapped=0x0) returned 1
	[0038.256] ReadFile (in: hFile=0x1b0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0038.256] WriteFile (in: hFile=0x1d8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe0, lpOverlapped=0x0) returned 1
	[0038.256] SetEndOfFile (hFile=0x1d8) returned 1
	[0038.256] CloseHandle (hObject=0x1d8) returned 1
	[0038.257] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.257] SetEndOfFile (hFile=0x1b0) returned 1
	[0038.258] CloseHandle (hObject=0x1b0) returned 1
	[0038.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0038.258] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif")) returned 1
	[0038.258] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61
	[0038.258] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61
	[0038.258] lstrlenW (lpString=".doc") returned 4
	[0038.258] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0038.258] lstrlenW (lpString=".docx") returned 5
	[0038.258] lstrcmpiW (lpString1=".docx", lpString2="S.GIF") returned -1
	[0038.258] lstrlenW (lpString=".pdf") returned 4
	[0038.258] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0038.258] lstrlenW (lpString=".xls") returned 4
	[0038.258] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0038.258] lstrlenW (lpString=".xlsx") returned 5
	[0038.258] lstrcmpiW (lpString1=".xlsx", lpString2="S.GIF") returned -1
	[0038.258] lstrlenW (lpString=".ppt") returned 4
	[0038.259] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0038.259] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61
	[0038.259] lstrlenW (lpString=".zip") returned 4
	[0038.259] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0038.259] lstrlenW (lpString=".rar") returned 4
	[0038.259] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0038.259] lstrlenW (lpString=".bz2") returned 4
	[0038.259] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0038.259] lstrlenW (lpString=".7z") returned 3
	[0038.259] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0038.259] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61
	[0038.259] lstrlenW (lpString=".dbf") returned 4
	[0038.259] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0038.259] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61
	[0038.259] lstrlenW (lpString=".1cd") returned 4
	[0038.259] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0038.259] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61
	[0038.259] lstrlenW (lpString=".jpg") returned 4
	[0038.259] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0038.259] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61
	[0038.259] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61
	[0038.259] lstrlenW (lpString=".doc") returned 4
	[0038.259] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0038.259] lstrlenW (lpString=".docx") returned 5
	[0038.259] lstrcmpiW (lpString1=".docx", lpString2="S.GIF") returned -1
	[0038.259] lstrlenW (lpString=".pdf") returned 4
	[0038.259] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0038.259] lstrlenW (lpString=".xls") returned 4
	[0038.259] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0038.259] lstrlenW (lpString=".xlsx") returned 5
	[0038.260] lstrcmpiW (lpString1=".xlsx", lpString2="S.GIF") returned -1
	[0038.260] lstrlenW (lpString=".ppt") returned 4
	[0038.260] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0038.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61
	[0038.260] lstrlenW (lpString=".zip") returned 4
	[0038.260] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0038.260] lstrlenW (lpString=".rar") returned 4
	[0038.260] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0038.260] lstrlenW (lpString=".bz2") returned 4
	[0038.260] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0038.260] lstrlenW (lpString=".7z") returned 3
	[0038.260] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0038.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61
	[0038.260] lstrlenW (lpString=".dbf") returned 4
	[0038.260] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0038.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61
	[0038.260] lstrlenW (lpString=".1cd") returned 4
	[0038.260] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0038.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF") returned 61
	[0038.260] lstrlenW (lpString=".jpg") returned 4
	[0038.260] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0038.260] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0038.260] lstrlenW (lpString="MS.PNG") returned 6
	[0038.260] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0038.261] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1682) returned 1
	[0038.261] CloseHandle (hObject=0x1b0) returned 1
	[0038.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png")) returned 0x20
	[0038.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.261] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0038.261] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.261] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.261] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0038.261] GetLastError () returned 0x0
	[0038.261] ReadFile (in: hFile=0x1b0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x692, lpOverlapped=0x0) returned 1
	[0038.263] WriteFile (in: hFile=0x1d8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x6a0, lpOverlapped=0x0) returned 1
	[0038.264] ReadFile (in: hFile=0x1b0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0038.264] WriteFile (in: hFile=0x1d8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe0, lpOverlapped=0x0) returned 1
	[0038.264] SetEndOfFile (hFile=0x1d8) returned 1
	[0038.264] CloseHandle (hObject=0x1d8) returned 1
	[0038.264] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.265] SetEndOfFile (hFile=0x1b0) returned 1
	[0038.265] CloseHandle (hObject=0x1b0) returned 1
	[0038.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0038.266] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png")) returned 1
	[0038.266] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61
	[0038.266] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61
	[0038.266] lstrlenW (lpString=".doc") returned 4
	[0038.266] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0038.266] lstrlenW (lpString=".docx") returned 5
	[0038.266] lstrcmpiW (lpString1=".docx", lpString2="S.PNG") returned -1
	[0038.266] lstrlenW (lpString=".pdf") returned 4
	[0038.266] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0038.266] lstrlenW (lpString=".xls") returned 4
	[0038.266] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0038.266] lstrlenW (lpString=".xlsx") returned 5
	[0038.266] lstrcmpiW (lpString1=".xlsx", lpString2="S.PNG") returned -1
	[0038.266] lstrlenW (lpString=".ppt") returned 4
	[0038.266] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0038.266] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61
	[0038.266] lstrlenW (lpString=".zip") returned 4
	[0038.266] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0038.266] lstrlenW (lpString=".rar") returned 4
	[0038.266] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0038.266] lstrlenW (lpString=".bz2") returned 4
	[0038.266] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0038.266] lstrlenW (lpString=".7z") returned 3
	[0038.266] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0038.266] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61
	[0038.266] lstrlenW (lpString=".dbf") returned 4
	[0038.266] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0038.266] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61
	[0038.267] lstrlenW (lpString=".1cd") returned 4
	[0038.267] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0038.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61
	[0038.267] lstrlenW (lpString=".jpg") returned 4
	[0038.267] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0038.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61
	[0038.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61
	[0038.267] lstrlenW (lpString=".doc") returned 4
	[0038.267] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0038.267] lstrlenW (lpString=".docx") returned 5
	[0038.267] lstrcmpiW (lpString1=".docx", lpString2="S.PNG") returned -1
	[0038.267] lstrlenW (lpString=".pdf") returned 4
	[0038.267] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0038.267] lstrlenW (lpString=".xls") returned 4
	[0038.267] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0038.267] lstrlenW (lpString=".xlsx") returned 5
	[0038.267] lstrcmpiW (lpString1=".xlsx", lpString2="S.PNG") returned -1
	[0038.267] lstrlenW (lpString=".ppt") returned 4
	[0038.267] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0038.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61
	[0038.267] lstrlenW (lpString=".zip") returned 4
	[0038.267] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0038.267] lstrlenW (lpString=".rar") returned 4
	[0038.267] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0038.267] lstrlenW (lpString=".bz2") returned 4
	[0038.267] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0038.267] lstrlenW (lpString=".7z") returned 3
	[0038.267] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0038.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61
	[0038.267] lstrlenW (lpString=".dbf") returned 4
	[0038.267] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0038.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61
	[0038.268] lstrlenW (lpString=".1cd") returned 4
	[0038.268] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0038.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG") returned 61
	[0038.268] lstrlenW (lpString=".jpg") returned 4
	[0038.268] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0038.268] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0038.268] lstrlenW (lpString="Alphabet.xml") returned 12
	[0038.268] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0038.269] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=791686) returned 1
	[0038.269] CloseHandle (hObject=0x1b0) returned 1
	[0038.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20
	[0038.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.269] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0038.270] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0038.270] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0038.270] lstrlenW (lpString=".doc") returned 4
	[0038.270] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.270] lstrlenW (lpString=".docx") returned 5
	[0038.270] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0038.270] lstrlenW (lpString=".pdf") returned 4
	[0038.270] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.270] lstrlenW (lpString=".xls") returned 4
	[0038.270] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.270] lstrlenW (lpString=".xlsx") returned 5
	[0038.270] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0038.270] lstrlenW (lpString=".ppt") returned 4
	[0038.270] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.270] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0038.270] lstrlenW (lpString=".zip") returned 4
	[0038.270] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.270] lstrlenW (lpString=".rar") returned 4
	[0038.270] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.270] lstrlenW (lpString=".bz2") returned 4
	[0038.270] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.270] lstrlenW (lpString=".7z") returned 3
	[0038.270] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.270] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0038.270] lstrlenW (lpString=".dbf") returned 4
	[0038.270] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.270] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0038.270] lstrlenW (lpString=".1cd") returned 4
	[0038.270] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.270] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0038.270] lstrlenW (lpString=".jpg") returned 4
	[0038.270] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.271] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0038.271] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0038.271] lstrlenW (lpString=".doc") returned 4
	[0038.271] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.271] lstrlenW (lpString=".docx") returned 5
	[0038.271] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0038.271] lstrlenW (lpString=".pdf") returned 4
	[0038.271] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.271] lstrlenW (lpString=".xls") returned 4
	[0038.271] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.271] lstrlenW (lpString=".xlsx") returned 5
	[0038.271] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0038.271] lstrlenW (lpString=".ppt") returned 4
	[0038.271] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.271] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0038.271] lstrlenW (lpString=".zip") returned 4
	[0038.271] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.271] lstrlenW (lpString=".rar") returned 4
	[0038.271] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.271] lstrlenW (lpString=".bz2") returned 4
	[0038.271] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.271] lstrlenW (lpString=".7z") returned 3
	[0038.271] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.271] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0038.271] lstrlenW (lpString=".dbf") returned 4
	[0038.271] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.271] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0038.271] lstrlenW (lpString=".1cd") returned 4
	[0038.271] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.271] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml") returned 63
	[0038.271] lstrlenW (lpString=".jpg") returned 4
	[0038.271] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.272] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0038.272] lstrlenW (lpString="Content.xml") returned 11
	[0038.272] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0038.272] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=27045) returned 1
	[0038.272] CloseHandle (hObject=0x1b0) returned 1
	[0038.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20
	[0038.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.272] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0038.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0038.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0038.272] lstrlenW (lpString=".doc") returned 4
	[0038.272] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.272] lstrlenW (lpString=".docx") returned 5
	[0038.272] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0038.272] lstrlenW (lpString=".pdf") returned 4
	[0038.273] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.273] lstrlenW (lpString=".xls") returned 4
	[0038.273] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.273] lstrlenW (lpString=".xlsx") returned 5
	[0038.273] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0038.273] lstrlenW (lpString=".ppt") returned 4
	[0038.273] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0038.273] lstrlenW (lpString=".zip") returned 4
	[0038.273] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.273] lstrlenW (lpString=".rar") returned 4
	[0038.273] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.273] lstrlenW (lpString=".bz2") returned 4
	[0038.273] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.273] lstrlenW (lpString=".7z") returned 3
	[0038.273] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0038.273] lstrlenW (lpString=".dbf") returned 4
	[0038.273] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0038.273] lstrlenW (lpString=".1cd") returned 4
	[0038.273] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0038.273] lstrlenW (lpString=".jpg") returned 4
	[0038.273] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0038.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0038.273] lstrlenW (lpString=".doc") returned 4
	[0038.273] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.273] lstrlenW (lpString=".docx") returned 5
	[0038.273] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0038.273] lstrlenW (lpString=".pdf") returned 4
	[0038.273] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.274] lstrlenW (lpString=".xls") returned 4
	[0038.274] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.274] lstrlenW (lpString=".xlsx") returned 5
	[0038.274] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0038.274] lstrlenW (lpString=".ppt") returned 4
	[0038.274] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0038.274] lstrlenW (lpString=".zip") returned 4
	[0038.274] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.274] lstrlenW (lpString=".rar") returned 4
	[0038.274] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.274] lstrlenW (lpString=".bz2") returned 4
	[0038.274] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.274] lstrlenW (lpString=".7z") returned 3
	[0038.274] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0038.274] lstrlenW (lpString=".dbf") returned 4
	[0038.274] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0038.274] lstrlenW (lpString=".1cd") returned 4
	[0038.274] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml") returned 62
	[0038.274] lstrlenW (lpString=".jpg") returned 4
	[0038.274] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.275] lstrcmpiW (lpString1=".avi", lpString2=".beets") returned -1
	[0038.275] lstrlenW (lpString="boxed-correct.avi") returned 17
	[0038.275] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0039.137] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=89600) returned 1
	[0039.137] CloseHandle (hObject=0x1d8) returned 1
	[0039.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20
	[0039.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.137] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0039.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0039.137] lstrlenW (lpString=".doc") returned 4
	[0039.137] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.137] lstrlenW (lpString=".docx") returned 5
	[0039.137] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0039.137] lstrlenW (lpString=".pdf") returned 4
	[0039.137] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.137] lstrlenW (lpString=".xls") returned 4
	[0039.137] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.137] lstrlenW (lpString=".xlsx") returned 5
	[0039.137] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0039.137] lstrlenW (lpString=".ppt") returned 4
	[0039.137] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0039.137] lstrlenW (lpString=".zip") returned 4
	[0039.137] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.137] lstrlenW (lpString=".rar") returned 4
	[0039.138] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.138] lstrlenW (lpString=".bz2") returned 4
	[0039.138] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.138] lstrlenW (lpString=".7z") returned 3
	[0039.138] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0039.138] lstrlenW (lpString=".dbf") returned 4
	[0039.138] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0039.138] lstrlenW (lpString=".1cd") returned 4
	[0039.138] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0039.138] lstrlenW (lpString=".jpg") returned 4
	[0039.138] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0039.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0039.138] lstrlenW (lpString=".doc") returned 4
	[0039.138] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.138] lstrlenW (lpString=".docx") returned 5
	[0039.138] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0039.138] lstrlenW (lpString=".pdf") returned 4
	[0039.138] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.138] lstrlenW (lpString=".xls") returned 4
	[0039.138] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.138] lstrlenW (lpString=".xlsx") returned 5
	[0039.138] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0039.138] lstrlenW (lpString=".ppt") returned 4
	[0039.138] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.138] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0039.138] lstrlenW (lpString=".zip") returned 4
	[0039.138] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.138] lstrlenW (lpString=".rar") returned 4
	[0039.139] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.139] lstrlenW (lpString=".bz2") returned 4
	[0039.139] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.139] lstrlenW (lpString=".7z") returned 3
	[0039.139] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0039.139] lstrlenW (lpString=".dbf") returned 4
	[0039.139] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0039.139] lstrlenW (lpString=".1cd") returned 4
	[0039.139] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.139] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0039.139] lstrlenW (lpString=".jpg") returned 4
	[0039.139] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.139] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0039.139] lstrlenW (lpString="ipshrv.xml") returned 10
	[0039.139] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0039.710] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=2652) returned 1
	[0039.710] CloseHandle (hObject=0x1e8) returned 1
	[0039.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20
	[0039.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.711] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61
	[0039.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61
	[0039.711] lstrlenW (lpString=".doc") returned 4
	[0039.711] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.711] lstrlenW (lpString=".docx") returned 5
	[0039.711] lstrcmpiW (lpString1=".docx", lpString2="v.xml") returned -1
	[0039.711] lstrlenW (lpString=".pdf") returned 4
	[0039.711] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.711] lstrlenW (lpString=".xls") returned 4
	[0039.711] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.711] lstrlenW (lpString=".xlsx") returned 5
	[0039.711] lstrcmpiW (lpString1=".xlsx", lpString2="v.xml") returned -1
	[0039.711] lstrlenW (lpString=".ppt") returned 4
	[0039.711] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61
	[0039.711] lstrlenW (lpString=".zip") returned 4
	[0039.711] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.711] lstrlenW (lpString=".rar") returned 4
	[0039.711] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.711] lstrlenW (lpString=".bz2") returned 4
	[0039.711] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.711] lstrlenW (lpString=".7z") returned 3
	[0039.711] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61
	[0039.711] lstrlenW (lpString=".dbf") returned 4
	[0039.711] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61
	[0039.711] lstrlenW (lpString=".1cd") returned 4
	[0039.711] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61
	[0039.712] lstrlenW (lpString=".jpg") returned 4
	[0039.712] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61
	[0039.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61
	[0039.712] lstrlenW (lpString=".doc") returned 4
	[0039.712] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.712] lstrlenW (lpString=".docx") returned 5
	[0039.712] lstrcmpiW (lpString1=".docx", lpString2="v.xml") returned -1
	[0039.712] lstrlenW (lpString=".pdf") returned 4
	[0039.712] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.712] lstrlenW (lpString=".xls") returned 4
	[0039.712] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.712] lstrlenW (lpString=".xlsx") returned 5
	[0039.712] lstrcmpiW (lpString1=".xlsx", lpString2="v.xml") returned -1
	[0039.712] lstrlenW (lpString=".ppt") returned 4
	[0039.712] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61
	[0039.712] lstrlenW (lpString=".zip") returned 4
	[0039.712] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.712] lstrlenW (lpString=".rar") returned 4
	[0039.712] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.712] lstrlenW (lpString=".bz2") returned 4
	[0039.712] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.712] lstrlenW (lpString=".7z") returned 3
	[0039.712] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61
	[0039.712] lstrlenW (lpString=".dbf") returned 4
	[0039.712] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61
	[0039.712] lstrlenW (lpString=".1cd") returned 4
	[0039.712] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml") returned 61
	[0039.713] lstrlenW (lpString=".jpg") returned 4
	[0039.713] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.713] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0039.713] lstrlenW (lpString="InfoPathMUI.XML") returned 15
	[0039.713] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0039.713] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1231) returned 1
	[0039.713] CloseHandle (hObject=0x1e8) returned 1
	[0039.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml")) returned 0x20
	[0039.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.713] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0039.713] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.714] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.714] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0040.116] GetLastError () returned 0x0
	[0040.116] ReadFile (in: hFile=0x1e8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x4cf, lpOverlapped=0x0) returned 1
	[0040.287] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x4d0, lpOverlapped=0x0) returned 1
	[0040.288] ReadFile (in: hFile=0x1e8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.288] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xf2, lpOverlapped=0x0) returned 1
	[0040.288] SetEndOfFile (hFile=0x1ac) returned 1
	[0040.288] CloseHandle (hObject=0x1ac) returned 1
	[0040.289] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.289] SetEndOfFile (hFile=0x1e8) returned 1
	[0040.290] CloseHandle (hObject=0x1e8) returned 1
	[0040.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.290] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml")) returned 1
	[0040.291] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0040.291] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0040.291] lstrlenW (lpString=".doc") returned 4
	[0040.291] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.291] lstrlenW (lpString=".docx") returned 5
	[0040.291] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0040.291] lstrlenW (lpString=".pdf") returned 4
	[0040.291] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.291] lstrlenW (lpString=".xls") returned 4
	[0040.291] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.291] lstrlenW (lpString=".xlsx") returned 5
	[0040.291] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0040.291] lstrlenW (lpString=".ppt") returned 4
	[0040.291] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.291] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0040.291] lstrlenW (lpString=".zip") returned 4
	[0040.291] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.291] lstrlenW (lpString=".rar") returned 4
	[0040.291] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.291] lstrlenW (lpString=".bz2") returned 4
	[0040.291] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.291] lstrlenW (lpString=".7z") returned 3
	[0040.291] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.291] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0040.291] lstrlenW (lpString=".dbf") returned 4
	[0040.291] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.291] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0040.291] lstrlenW (lpString=".1cd") returned 4
	[0040.291] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.291] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0040.291] lstrlenW (lpString=".jpg") returned 4
	[0040.291] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.292] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0040.292] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0040.292] lstrlenW (lpString=".doc") returned 4
	[0040.292] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.292] lstrlenW (lpString=".docx") returned 5
	[0040.292] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0040.292] lstrlenW (lpString=".pdf") returned 4
	[0040.292] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.292] lstrlenW (lpString=".xls") returned 4
	[0040.292] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.292] lstrlenW (lpString=".xlsx") returned 5
	[0040.292] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0040.292] lstrlenW (lpString=".ppt") returned 4
	[0040.292] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.292] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0040.292] lstrlenW (lpString=".zip") returned 4
	[0040.292] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.292] lstrlenW (lpString=".rar") returned 4
	[0040.292] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.292] lstrlenW (lpString=".bz2") returned 4
	[0040.292] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.292] lstrlenW (lpString=".7z") returned 3
	[0040.292] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.292] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0040.292] lstrlenW (lpString=".dbf") returned 4
	[0040.292] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.292] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0040.292] lstrlenW (lpString=".1cd") returned 4
	[0040.292] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.292] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML") returned 110
	[0040.292] lstrlenW (lpString=".jpg") returned 4
	[0040.292] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.293] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0040.293] lstrlenW (lpString="BRANDING.XML") returned 12
	[0040.293] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0040.337] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=596341) returned 1
	[0040.337] CloseHandle (hObject=0x1e4) returned 1
	[0040.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml")) returned 0x20
	[0040.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.338] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0040.338] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.338] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.338] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0040.338] GetLastError () returned 0x0
	[0040.338] ReadFile (in: hFile=0x1e4, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x91975, lpOverlapped=0x0) returned 1
	[0040.354] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x91980, lpOverlapped=0x0) returned 1
	[0040.364] ReadFile (in: hFile=0x1e4, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.364] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0040.364] SetEndOfFile (hFile=0x1e0) returned 1
	[0040.364] CloseHandle (hObject=0x1e0) returned 1
	[0040.371] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.371] SetEndOfFile (hFile=0x1e4) returned 1
	[0040.377] CloseHandle (hObject=0x1e4) returned 1
	[0040.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.377] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml")) returned 1
	[0040.377] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0040.377] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0040.377] lstrlenW (lpString=".doc") returned 4
	[0040.377] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.377] lstrlenW (lpString=".docx") returned 5
	[0040.377] lstrcmpiW (lpString1=".docx", lpString2="G.XML") returned -1
	[0040.377] lstrlenW (lpString=".pdf") returned 4
	[0040.377] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.378] lstrlenW (lpString=".xls") returned 4
	[0040.378] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.378] lstrlenW (lpString=".xlsx") returned 5
	[0040.378] lstrcmpiW (lpString1=".xlsx", lpString2="G.XML") returned -1
	[0040.378] lstrlenW (lpString=".ppt") returned 4
	[0040.378] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.378] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0040.378] lstrlenW (lpString=".zip") returned 4
	[0040.378] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.378] lstrlenW (lpString=".rar") returned 4
	[0040.378] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.378] lstrlenW (lpString=".bz2") returned 4
	[0040.378] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.378] lstrlenW (lpString=".7z") returned 3
	[0040.378] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.378] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0040.378] lstrlenW (lpString=".dbf") returned 4
	[0040.378] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.378] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0040.378] lstrlenW (lpString=".1cd") returned 4
	[0040.378] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.378] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0040.378] lstrlenW (lpString=".jpg") returned 4
	[0040.378] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.378] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0040.378] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0040.378] lstrlenW (lpString=".doc") returned 4
	[0040.378] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.378] lstrlenW (lpString=".docx") returned 5
	[0040.378] lstrcmpiW (lpString1=".docx", lpString2="G.XML") returned -1
	[0040.378] lstrlenW (lpString=".pdf") returned 4
	[0040.378] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.379] lstrlenW (lpString=".xls") returned 4
	[0040.379] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.379] lstrlenW (lpString=".xlsx") returned 5
	[0040.379] lstrcmpiW (lpString1=".xlsx", lpString2="G.XML") returned -1
	[0040.379] lstrlenW (lpString=".ppt") returned 4
	[0040.379] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0040.379] lstrlenW (lpString=".zip") returned 4
	[0040.379] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.379] lstrlenW (lpString=".rar") returned 4
	[0040.379] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.379] lstrlenW (lpString=".bz2") returned 4
	[0040.379] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.379] lstrlenW (lpString=".7z") returned 3
	[0040.379] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0040.379] lstrlenW (lpString=".dbf") returned 4
	[0040.379] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0040.379] lstrlenW (lpString=".1cd") returned 4
	[0040.379] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML") returned 105
	[0040.379] lstrlenW (lpString=".jpg") returned 4
	[0040.379] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.379] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0040.379] lstrlenW (lpString="OfficeMUI.XML") returned 13
	[0040.379] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0040.380] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=5557) returned 1
	[0040.380] CloseHandle (hObject=0x1e4) returned 1
	[0040.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml")) returned 0x20
	[0040.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.381] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0040.381] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.381] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.381] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0040.381] GetLastError () returned 0x0
	[0040.381] ReadFile (in: hFile=0x1e4, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x15b5, lpOverlapped=0x0) returned 1
	[0040.382] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x15c0, lpOverlapped=0x0) returned 1
	[0040.383] ReadFile (in: hFile=0x1e4, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.383] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xee, lpOverlapped=0x0) returned 1
	[0040.384] SetEndOfFile (hFile=0x1e0) returned 1
	[0040.384] CloseHandle (hObject=0x1e0) returned 1
	[0040.384] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.384] SetEndOfFile (hFile=0x1e4) returned 1
	[0040.386] CloseHandle (hObject=0x1e4) returned 1
	[0040.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.386] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml")) returned 1
	[0040.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0040.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0040.386] lstrlenW (lpString=".doc") returned 4
	[0040.386] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.386] lstrlenW (lpString=".docx") returned 5
	[0040.387] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0040.387] lstrlenW (lpString=".pdf") returned 4
	[0040.387] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.387] lstrlenW (lpString=".xls") returned 4
	[0040.387] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.387] lstrlenW (lpString=".xlsx") returned 5
	[0040.387] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0040.387] lstrlenW (lpString=".ppt") returned 4
	[0040.387] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0040.387] lstrlenW (lpString=".zip") returned 4
	[0040.387] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.387] lstrlenW (lpString=".rar") returned 4
	[0040.387] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.387] lstrlenW (lpString=".bz2") returned 4
	[0040.387] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.387] lstrlenW (lpString=".7z") returned 3
	[0040.387] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0040.387] lstrlenW (lpString=".dbf") returned 4
	[0040.387] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0040.387] lstrlenW (lpString=".1cd") returned 4
	[0040.387] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0040.387] lstrlenW (lpString=".jpg") returned 4
	[0040.387] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0040.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0040.387] lstrlenW (lpString=".doc") returned 4
	[0040.387] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.387] lstrlenW (lpString=".docx") returned 5
	[0040.388] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0040.388] lstrlenW (lpString=".pdf") returned 4
	[0040.388] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.388] lstrlenW (lpString=".xls") returned 4
	[0040.388] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.388] lstrlenW (lpString=".xlsx") returned 5
	[0040.388] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0040.388] lstrlenW (lpString=".ppt") returned 4
	[0040.388] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0040.388] lstrlenW (lpString=".zip") returned 4
	[0040.388] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.388] lstrlenW (lpString=".rar") returned 4
	[0040.388] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.388] lstrlenW (lpString=".bz2") returned 4
	[0040.388] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.388] lstrlenW (lpString=".7z") returned 3
	[0040.388] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0040.388] lstrlenW (lpString=".dbf") returned 4
	[0040.388] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0040.388] lstrlenW (lpString=".1cd") returned 4
	[0040.388] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML") returned 106
	[0040.388] lstrlenW (lpString=".jpg") returned 4
	[0040.388] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.388] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0040.388] lstrlenW (lpString="OfficeMUISet.XML") returned 16
	[0040.389] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0040.389] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=819) returned 1
	[0040.389] CloseHandle (hObject=0x1e4) returned 1
	[0040.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml")) returned 0x20
	[0040.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.389] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0040.389] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.389] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.389] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0040.389] GetLastError () returned 0x0
	[0040.389] ReadFile (in: hFile=0x1e4, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x333, lpOverlapped=0x0) returned 1
	[0040.391] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x340, lpOverlapped=0x0) returned 1
	[0040.392] ReadFile (in: hFile=0x1e4, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.392] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xf4, lpOverlapped=0x0) returned 1
	[0040.392] SetEndOfFile (hFile=0x1e0) returned 1
	[0040.392] CloseHandle (hObject=0x1e0) returned 1
	[0040.393] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.393] SetEndOfFile (hFile=0x1e4) returned 1
	[0040.393] CloseHandle (hObject=0x1e4) returned 1
	[0040.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.394] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml")) returned 1
	[0040.394] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0040.394] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0040.394] lstrlenW (lpString=".doc") returned 4
	[0040.394] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.394] lstrlenW (lpString=".docx") returned 5
	[0040.394] lstrcmpiW (lpString1=".docx", lpString2="t.XML") returned -1
	[0040.394] lstrlenW (lpString=".pdf") returned 4
	[0040.394] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.394] lstrlenW (lpString=".xls") returned 4
	[0040.394] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.394] lstrlenW (lpString=".xlsx") returned 5
	[0040.394] lstrcmpiW (lpString1=".xlsx", lpString2="t.XML") returned -1
	[0040.394] lstrlenW (lpString=".ppt") returned 4
	[0040.394] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.394] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0040.394] lstrlenW (lpString=".zip") returned 4
	[0040.394] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.394] lstrlenW (lpString=".rar") returned 4
	[0040.394] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.394] lstrlenW (lpString=".bz2") returned 4
	[0040.394] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.395] lstrlenW (lpString=".7z") returned 3
	[0040.395] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.395] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0040.395] lstrlenW (lpString=".dbf") returned 4
	[0040.395] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.395] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0040.395] lstrlenW (lpString=".1cd") returned 4
	[0040.395] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.395] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0040.395] lstrlenW (lpString=".jpg") returned 4
	[0040.395] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.395] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0040.395] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0040.395] lstrlenW (lpString=".doc") returned 4
	[0040.395] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.395] lstrlenW (lpString=".docx") returned 5
	[0040.395] lstrcmpiW (lpString1=".docx", lpString2="t.XML") returned -1
	[0040.395] lstrlenW (lpString=".pdf") returned 4
	[0040.395] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.395] lstrlenW (lpString=".xls") returned 4
	[0040.395] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.395] lstrlenW (lpString=".xlsx") returned 5
	[0040.395] lstrcmpiW (lpString1=".xlsx", lpString2="t.XML") returned -1
	[0040.395] lstrlenW (lpString=".ppt") returned 4
	[0040.395] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.395] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0040.395] lstrlenW (lpString=".zip") returned 4
	[0040.395] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.395] lstrlenW (lpString=".rar") returned 4
	[0040.395] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.395] lstrlenW (lpString=".bz2") returned 4
	[0040.395] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.396] lstrlenW (lpString=".7z") returned 3
	[0040.396] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.396] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0040.396] lstrlenW (lpString=".dbf") returned 4
	[0040.396] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.396] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0040.396] lstrlenW (lpString=".1cd") returned 4
	[0040.396] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.396] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML") returned 109
	[0040.396] lstrlenW (lpString=".jpg") returned 4
	[0040.397] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.397] lstrcmpiW (lpString1=".CHM", lpString2=".beets") returned 1
	[0040.397] lstrlenW (lpString="PSCONFIG.CHM") returned 12
	[0040.397] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0040.398] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=37689) returned 1
	[0040.398] CloseHandle (hObject=0x1e4) returned 1
	[0040.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm")) returned 0x20
	[0040.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.398] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0040.398] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.398] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.398] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0040.398] GetLastError () returned 0x0
	[0040.398] ReadFile (in: hFile=0x1e4, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x9339, lpOverlapped=0x0) returned 1
	[0040.401] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x9340, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x9340, lpOverlapped=0x0) returned 1
	[0040.402] ReadFile (in: hFile=0x1e4, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.402] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0040.402] SetEndOfFile (hFile=0x1e0) returned 1
	[0040.402] CloseHandle (hObject=0x1e0) returned 1
	[0040.403] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.403] SetEndOfFile (hFile=0x1e4) returned 1
	[0040.404] CloseHandle (hObject=0x1e4) returned 1
	[0040.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.405] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm")) returned 1
	[0040.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105
	[0040.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105
	[0040.405] lstrlenW (lpString=".doc") returned 4
	[0040.405] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0040.405] lstrlenW (lpString=".docx") returned 5
	[0040.405] lstrcmpiW (lpString1=".docx", lpString2="G.CHM") returned -1
	[0040.405] lstrlenW (lpString=".pdf") returned 4
	[0040.405] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0040.405] lstrlenW (lpString=".xls") returned 4
	[0040.405] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0040.405] lstrlenW (lpString=".xlsx") returned 5
	[0040.405] lstrcmpiW (lpString1=".xlsx", lpString2="G.CHM") returned -1
	[0040.405] lstrlenW (lpString=".ppt") returned 4
	[0040.405] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0040.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105
	[0040.405] lstrlenW (lpString=".zip") returned 4
	[0040.405] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0040.405] lstrlenW (lpString=".rar") returned 4
	[0040.405] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0040.405] lstrlenW (lpString=".bz2") returned 4
	[0040.405] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0040.405] lstrlenW (lpString=".7z") returned 3
	[0040.405] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0040.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105
	[0040.405] lstrlenW (lpString=".dbf") returned 4
	[0040.406] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0040.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105
	[0040.406] lstrlenW (lpString=".1cd") returned 4
	[0040.406] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0040.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105
	[0040.406] lstrlenW (lpString=".jpg") returned 4
	[0040.406] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0040.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105
	[0040.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105
	[0040.406] lstrlenW (lpString=".doc") returned 4
	[0040.406] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0040.406] lstrlenW (lpString=".docx") returned 5
	[0040.406] lstrcmpiW (lpString1=".docx", lpString2="G.CHM") returned -1
	[0040.406] lstrlenW (lpString=".pdf") returned 4
	[0040.406] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0040.406] lstrlenW (lpString=".xls") returned 4
	[0040.406] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0040.406] lstrlenW (lpString=".xlsx") returned 5
	[0040.406] lstrcmpiW (lpString1=".xlsx", lpString2="G.CHM") returned -1
	[0040.406] lstrlenW (lpString=".ppt") returned 4
	[0040.406] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0040.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105
	[0040.406] lstrlenW (lpString=".zip") returned 4
	[0040.406] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0040.406] lstrlenW (lpString=".rar") returned 4
	[0040.406] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0040.406] lstrlenW (lpString=".bz2") returned 4
	[0040.406] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0040.406] lstrlenW (lpString=".7z") returned 3
	[0040.406] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0040.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105
	[0040.406] lstrlenW (lpString=".dbf") returned 4
	[0040.406] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0040.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105
	[0040.407] lstrlenW (lpString=".1cd") returned 4
	[0040.407] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0040.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM") returned 105
	[0040.407] lstrlenW (lpString=".jpg") returned 4
	[0040.407] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0040.407] lstrcmpiW (lpString1=".CHM", lpString2=".beets") returned 1
	[0040.407] lstrlenW (lpString="PSS10O.CHM") returned 10
	[0040.407] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0040.407] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=26929) returned 1
	[0040.407] CloseHandle (hObject=0x1e4) returned 1
	[0040.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm")) returned 0x20
	[0040.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.407] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0040.407] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.408] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.408] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0040.408] GetLastError () returned 0x0
	[0040.408] ReadFile (in: hFile=0x1e4, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x6931, lpOverlapped=0x0) returned 1
	[0040.885] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x6940, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x6940, lpOverlapped=0x0) returned 1
	[0040.886] ReadFile (in: hFile=0x1e4, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.886] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0040.886] SetEndOfFile (hFile=0x1e0) returned 1
	[0040.886] CloseHandle (hObject=0x1e0) returned 1
	[0040.887] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.887] SetEndOfFile (hFile=0x1e4) returned 1
	[0040.888] CloseHandle (hObject=0x1e4) returned 1
	[0040.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.888] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm")) returned 1
	[0040.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103
	[0040.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103
	[0040.888] lstrlenW (lpString=".doc") returned 4
	[0040.888] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0040.888] lstrlenW (lpString=".docx") returned 5
	[0040.889] lstrcmpiW (lpString1=".docx", lpString2="O.CHM") returned -1
	[0040.889] lstrlenW (lpString=".pdf") returned 4
	[0040.889] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0040.889] lstrlenW (lpString=".xls") returned 4
	[0040.889] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0040.889] lstrlenW (lpString=".xlsx") returned 5
	[0040.889] lstrcmpiW (lpString1=".xlsx", lpString2="O.CHM") returned -1
	[0040.889] lstrlenW (lpString=".ppt") returned 4
	[0040.889] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0040.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103
	[0040.889] lstrlenW (lpString=".zip") returned 4
	[0040.889] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0040.889] lstrlenW (lpString=".rar") returned 4
	[0040.889] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0040.889] lstrlenW (lpString=".bz2") returned 4
	[0040.889] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0040.889] lstrlenW (lpString=".7z") returned 3
	[0040.889] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0040.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103
	[0040.889] lstrlenW (lpString=".dbf") returned 4
	[0040.889] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0040.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103
	[0040.889] lstrlenW (lpString=".1cd") returned 4
	[0040.889] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0040.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103
	[0040.889] lstrlenW (lpString=".jpg") returned 4
	[0040.889] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0040.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103
	[0040.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103
	[0040.889] lstrlenW (lpString=".doc") returned 4
	[0040.889] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0040.889] lstrlenW (lpString=".docx") returned 5
	[0040.890] lstrcmpiW (lpString1=".docx", lpString2="O.CHM") returned -1
	[0040.890] lstrlenW (lpString=".pdf") returned 4
	[0040.890] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0040.890] lstrlenW (lpString=".xls") returned 4
	[0040.890] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0040.890] lstrlenW (lpString=".xlsx") returned 5
	[0040.890] lstrcmpiW (lpString1=".xlsx", lpString2="O.CHM") returned -1
	[0040.890] lstrlenW (lpString=".ppt") returned 4
	[0040.890] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0040.890] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103
	[0040.890] lstrlenW (lpString=".zip") returned 4
	[0040.890] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0040.890] lstrlenW (lpString=".rar") returned 4
	[0040.890] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0040.890] lstrlenW (lpString=".bz2") returned 4
	[0040.890] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0040.890] lstrlenW (lpString=".7z") returned 3
	[0040.890] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0040.890] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103
	[0040.890] lstrlenW (lpString=".dbf") returned 4
	[0040.890] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0040.890] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103
	[0040.890] lstrlenW (lpString=".1cd") returned 4
	[0040.890] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0040.890] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM") returned 103
	[0040.890] lstrlenW (lpString=".jpg") returned 4
	[0040.890] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0040.890] lstrcmpiW (lpString1=".CHM", lpString2=".beets") returned 1
	[0040.890] lstrlenW (lpString="PSS10R.CHM") returned 10
	[0040.891] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0040.948] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=27195) returned 1
	[0040.948] CloseHandle (hObject=0x1e8) returned 1
	[0040.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm")) returned 0x20
	[0040.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0040.948] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.948] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0040.948] GetLastError () returned 0x0
	[0040.948] ReadFile (in: hFile=0x1e8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x6a3b, lpOverlapped=0x0) returned 1
	[0040.951] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x6a40, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x6a40, lpOverlapped=0x0) returned 1
	[0040.952] ReadFile (in: hFile=0x1e8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.952] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0040.952] SetEndOfFile (hFile=0x1ac) returned 1
	[0040.952] CloseHandle (hObject=0x1ac) returned 1
	[0040.953] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.953] SetEndOfFile (hFile=0x1e8) returned 1
	[0040.954] CloseHandle (hObject=0x1e8) returned 1
	[0040.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.954] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm")) returned 1
	[0040.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103
	[0040.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103
	[0040.955] lstrlenW (lpString=".doc") returned 4
	[0040.955] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0040.955] lstrlenW (lpString=".docx") returned 5
	[0040.955] lstrcmpiW (lpString1=".docx", lpString2="R.CHM") returned -1
	[0040.955] lstrlenW (lpString=".pdf") returned 4
	[0040.955] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0040.955] lstrlenW (lpString=".xls") returned 4
	[0040.955] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0040.955] lstrlenW (lpString=".xlsx") returned 5
	[0040.955] lstrcmpiW (lpString1=".xlsx", lpString2="R.CHM") returned -1
	[0040.955] lstrlenW (lpString=".ppt") returned 4
	[0040.955] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0040.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103
	[0040.955] lstrlenW (lpString=".zip") returned 4
	[0040.955] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0040.955] lstrlenW (lpString=".rar") returned 4
	[0040.955] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0040.955] lstrlenW (lpString=".bz2") returned 4
	[0040.955] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0040.955] lstrlenW (lpString=".7z") returned 3
	[0040.955] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0040.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103
	[0040.955] lstrlenW (lpString=".dbf") returned 4
	[0040.955] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0040.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103
	[0040.955] lstrlenW (lpString=".1cd") returned 4
	[0040.955] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0040.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103
	[0040.955] lstrlenW (lpString=".jpg") returned 4
	[0040.956] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0040.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103
	[0040.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103
	[0040.956] lstrlenW (lpString=".doc") returned 4
	[0040.956] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0040.956] lstrlenW (lpString=".docx") returned 5
	[0040.956] lstrcmpiW (lpString1=".docx", lpString2="R.CHM") returned -1
	[0040.956] lstrlenW (lpString=".pdf") returned 4
	[0040.956] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0040.956] lstrlenW (lpString=".xls") returned 4
	[0040.956] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0040.956] lstrlenW (lpString=".xlsx") returned 5
	[0040.956] lstrcmpiW (lpString1=".xlsx", lpString2="R.CHM") returned -1
	[0040.956] lstrlenW (lpString=".ppt") returned 4
	[0040.956] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0040.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103
	[0040.956] lstrlenW (lpString=".zip") returned 4
	[0040.956] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0040.956] lstrlenW (lpString=".rar") returned 4
	[0040.956] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0040.956] lstrlenW (lpString=".bz2") returned 4
	[0040.956] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0040.956] lstrlenW (lpString=".7z") returned 3
	[0040.956] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0040.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103
	[0040.956] lstrlenW (lpString=".dbf") returned 4
	[0040.956] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0040.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103
	[0040.956] lstrlenW (lpString=".1cd") returned 4
	[0040.956] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0040.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM") returned 103
	[0040.956] lstrlenW (lpString=".jpg") returned 4
	[0040.957] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0040.957] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0040.957] lstrlenW (lpString="SETUP.XML") returned 9
	[0040.957] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0040.957] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=9352) returned 1
	[0040.957] CloseHandle (hObject=0x1e8) returned 1
	[0040.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml")) returned 0x20
	[0040.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.957] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0040.957] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.957] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.957] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0040.958] GetLastError () returned 0x0
	[0040.958] ReadFile (in: hFile=0x1e8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x2488, lpOverlapped=0x0) returned 1
	[0040.960] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x2490, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x2490, lpOverlapped=0x0) returned 1
	[0040.960] ReadFile (in: hFile=0x1e8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.961] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0040.961] SetEndOfFile (hFile=0x1ac) returned 1
	[0040.961] CloseHandle (hObject=0x1ac) returned 1
	[0040.961] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.962] SetEndOfFile (hFile=0x1e8) returned 1
	[0040.962] CloseHandle (hObject=0x1e8) returned 1
	[0040.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.963] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml")) returned 1
	[0040.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102
	[0040.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102
	[0040.963] lstrlenW (lpString=".doc") returned 4
	[0040.963] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.963] lstrlenW (lpString=".docx") returned 5
	[0040.963] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0040.963] lstrlenW (lpString=".pdf") returned 4
	[0040.963] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.963] lstrlenW (lpString=".xls") returned 4
	[0040.963] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.963] lstrlenW (lpString=".xlsx") returned 5
	[0040.963] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0040.963] lstrlenW (lpString=".ppt") returned 4
	[0040.963] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102
	[0040.963] lstrlenW (lpString=".zip") returned 4
	[0040.963] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.963] lstrlenW (lpString=".rar") returned 4
	[0040.963] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.963] lstrlenW (lpString=".bz2") returned 4
	[0040.963] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.963] lstrlenW (lpString=".7z") returned 3
	[0040.963] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102
	[0040.964] lstrlenW (lpString=".dbf") returned 4
	[0040.964] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102
	[0040.964] lstrlenW (lpString=".1cd") returned 4
	[0040.964] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102
	[0040.964] lstrlenW (lpString=".jpg") returned 4
	[0040.964] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102
	[0040.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102
	[0040.964] lstrlenW (lpString=".doc") returned 4
	[0040.964] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.964] lstrlenW (lpString=".docx") returned 5
	[0040.964] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0040.964] lstrlenW (lpString=".pdf") returned 4
	[0040.964] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.964] lstrlenW (lpString=".xls") returned 4
	[0040.964] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.964] lstrlenW (lpString=".xlsx") returned 5
	[0040.964] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0040.964] lstrlenW (lpString=".ppt") returned 4
	[0040.964] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102
	[0040.964] lstrlenW (lpString=".zip") returned 4
	[0040.964] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.964] lstrlenW (lpString=".rar") returned 4
	[0040.964] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.964] lstrlenW (lpString=".bz2") returned 4
	[0040.964] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.964] lstrlenW (lpString=".7z") returned 3
	[0040.964] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102
	[0040.965] lstrlenW (lpString=".dbf") returned 4
	[0040.965] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102
	[0040.965] lstrlenW (lpString=".1cd") returned 4
	[0040.965] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML") returned 102
	[0040.965] lstrlenW (lpString=".jpg") returned 4
	[0040.965] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.965] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0040.965] lstrlenW (lpString="Office32MUI.XML") returned 15
	[0040.965] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0040.966] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1383) returned 1
	[0040.966] CloseHandle (hObject=0x1e8) returned 1
	[0040.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml")) returned 0x20
	[0040.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.966] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0040.966] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.966] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.966] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0040.968] GetLastError () returned 0x0
	[0040.968] ReadFile (in: hFile=0x1e8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x567, lpOverlapped=0x0) returned 1
	[0040.969] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x570, lpOverlapped=0x0) returned 1
	[0040.970] ReadFile (in: hFile=0x1e8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.970] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xf2, lpOverlapped=0x0) returned 1
	[0040.970] SetEndOfFile (hFile=0x1ac) returned 1
	[0040.971] CloseHandle (hObject=0x1ac) returned 1
	[0040.971] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.971] SetEndOfFile (hFile=0x1e8) returned 1
	[0040.972] CloseHandle (hObject=0x1e8) returned 1
	[0040.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.972] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml")) returned 1
	[0040.973] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0040.973] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0040.973] lstrlenW (lpString=".doc") returned 4
	[0040.973] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.973] lstrlenW (lpString=".docx") returned 5
	[0040.973] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0040.973] lstrlenW (lpString=".pdf") returned 4
	[0040.973] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.973] lstrlenW (lpString=".xls") returned 4
	[0040.973] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.973] lstrlenW (lpString=".xlsx") returned 5
	[0040.973] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0040.973] lstrlenW (lpString=".ppt") returned 4
	[0040.973] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.973] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0040.973] lstrlenW (lpString=".zip") returned 4
	[0040.973] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.973] lstrlenW (lpString=".rar") returned 4
	[0040.973] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.973] lstrlenW (lpString=".bz2") returned 4
	[0040.973] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.973] lstrlenW (lpString=".7z") returned 3
	[0040.973] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.973] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0040.974] lstrlenW (lpString=".dbf") returned 4
	[0040.974] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0040.974] lstrlenW (lpString=".1cd") returned 4
	[0040.974] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0040.974] lstrlenW (lpString=".jpg") returned 4
	[0040.974] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0040.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0040.974] lstrlenW (lpString=".doc") returned 4
	[0040.974] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.974] lstrlenW (lpString=".docx") returned 5
	[0040.974] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0040.974] lstrlenW (lpString=".pdf") returned 4
	[0040.974] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.974] lstrlenW (lpString=".xls") returned 4
	[0040.974] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.974] lstrlenW (lpString=".xlsx") returned 5
	[0040.974] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0040.974] lstrlenW (lpString=".ppt") returned 4
	[0040.974] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0040.974] lstrlenW (lpString=".zip") returned 4
	[0040.974] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.974] lstrlenW (lpString=".rar") returned 4
	[0040.974] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.974] lstrlenW (lpString=".bz2") returned 4
	[0040.974] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.974] lstrlenW (lpString=".7z") returned 3
	[0040.974] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0040.975] lstrlenW (lpString=".dbf") returned 4
	[0040.975] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0040.975] lstrlenW (lpString=".1cd") returned 4
	[0040.975] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML") returned 110
	[0040.975] lstrlenW (lpString=".jpg") returned 4
	[0040.975] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.975] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0040.975] lstrlenW (lpString="SETUP.XML") returned 9
	[0040.975] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0040.975] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=2362) returned 1
	[0040.975] CloseHandle (hObject=0x1e8) returned 1
	[0040.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml")) returned 0x20
	[0040.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.976] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0040.976] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.976] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.976] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0040.976] GetLastError () returned 0x0
	[0040.976] ReadFile (in: hFile=0x1e8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x93a, lpOverlapped=0x0) returned 1
	[0041.269] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x940, lpOverlapped=0x0) returned 1
	[0041.271] ReadFile (in: hFile=0x1e8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.271] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0041.271] SetEndOfFile (hFile=0x1ac) returned 1
	[0041.271] CloseHandle (hObject=0x1ac) returned 1
	[0041.272] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.272] SetEndOfFile (hFile=0x1e8) returned 1
	[0041.273] CloseHandle (hObject=0x1e8) returned 1
	[0041.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.273] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml")) returned 1
	[0041.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104
	[0041.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104
	[0041.273] lstrlenW (lpString=".doc") returned 4
	[0041.273] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.273] lstrlenW (lpString=".docx") returned 5
	[0041.273] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0041.273] lstrlenW (lpString=".pdf") returned 4
	[0041.273] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.273] lstrlenW (lpString=".xls") returned 4
	[0041.273] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.273] lstrlenW (lpString=".xlsx") returned 5
	[0041.273] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0041.273] lstrlenW (lpString=".ppt") returned 4
	[0041.273] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104
	[0041.274] lstrlenW (lpString=".zip") returned 4
	[0041.274] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.274] lstrlenW (lpString=".rar") returned 4
	[0041.274] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.274] lstrlenW (lpString=".bz2") returned 4
	[0041.274] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.274] lstrlenW (lpString=".7z") returned 3
	[0041.274] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104
	[0041.274] lstrlenW (lpString=".dbf") returned 4
	[0041.274] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104
	[0041.274] lstrlenW (lpString=".1cd") returned 4
	[0041.274] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104
	[0041.274] lstrlenW (lpString=".jpg") returned 4
	[0041.274] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104
	[0041.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104
	[0041.274] lstrlenW (lpString=".doc") returned 4
	[0041.274] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.274] lstrlenW (lpString=".docx") returned 5
	[0041.274] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0041.274] lstrlenW (lpString=".pdf") returned 4
	[0041.274] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.274] lstrlenW (lpString=".xls") returned 4
	[0041.274] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.274] lstrlenW (lpString=".xlsx") returned 5
	[0041.274] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0041.274] lstrlenW (lpString=".ppt") returned 4
	[0041.274] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104
	[0041.275] lstrlenW (lpString=".zip") returned 4
	[0041.275] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.275] lstrlenW (lpString=".rar") returned 4
	[0041.275] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.275] lstrlenW (lpString=".bz2") returned 4
	[0041.275] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.275] lstrlenW (lpString=".7z") returned 3
	[0041.275] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.275] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104
	[0041.275] lstrlenW (lpString=".dbf") returned 4
	[0041.275] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.275] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104
	[0041.275] lstrlenW (lpString=".1cd") returned 4
	[0041.275] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.275] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML") returned 104
	[0041.275] lstrlenW (lpString=".jpg") returned 4
	[0041.275] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.275] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.275] lstrlenW (lpString="SETUP.XML") returned 9
	[0041.275] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0042.049] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1886) returned 1
	[0042.050] CloseHandle (hObject=0x208) returned 1
	[0042.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml")) returned 0x20
	[0042.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0042.054] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0042.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.054] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0042.762] GetLastError () returned 0x0
	[0042.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x75e, lpOverlapped=0x0) returned 1
	[0043.112] WriteFile (in: hFile=0x1e4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x760, lpOverlapped=0x0) returned 1
	[0043.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0043.113] WriteFile (in: hFile=0x1e4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0043.113] SetEndOfFile (hFile=0x1e4) returned 1
	[0043.113] CloseHandle (hObject=0x1e4) returned 1
	[0043.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.114] SetEndOfFile (hFile=0x1ec) returned 1
	[0043.115] CloseHandle (hObject=0x1ec) returned 1
	[0043.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0043.115] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml")) returned 1
	[0043.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106
	[0043.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106
	[0043.115] lstrlenW (lpString=".doc") returned 4
	[0043.115] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0043.115] lstrlenW (lpString=".docx") returned 5
	[0043.115] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0043.115] lstrlenW (lpString=".pdf") returned 4
	[0043.116] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0043.116] lstrlenW (lpString=".xls") returned 4
	[0043.116] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0043.116] lstrlenW (lpString=".xlsx") returned 5
	[0043.116] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0043.116] lstrlenW (lpString=".ppt") returned 4
	[0043.116] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0043.116] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106
	[0043.116] lstrlenW (lpString=".zip") returned 4
	[0043.116] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0043.116] lstrlenW (lpString=".rar") returned 4
	[0043.116] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0043.116] lstrlenW (lpString=".bz2") returned 4
	[0043.116] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0043.116] lstrlenW (lpString=".7z") returned 3
	[0043.116] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0043.116] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106
	[0043.116] lstrlenW (lpString=".dbf") returned 4
	[0043.116] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0043.116] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106
	[0043.116] lstrlenW (lpString=".1cd") returned 4
	[0043.116] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0043.116] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106
	[0043.116] lstrlenW (lpString=".jpg") returned 4
	[0043.116] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0043.116] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106
	[0043.116] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106
	[0043.116] lstrlenW (lpString=".doc") returned 4
	[0043.116] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0043.116] lstrlenW (lpString=".docx") returned 5
	[0043.116] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0043.116] lstrlenW (lpString=".pdf") returned 4
	[0043.117] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0043.117] lstrlenW (lpString=".xls") returned 4
	[0043.117] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0043.117] lstrlenW (lpString=".xlsx") returned 5
	[0043.117] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0043.117] lstrlenW (lpString=".ppt") returned 4
	[0043.117] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0043.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106
	[0043.117] lstrlenW (lpString=".zip") returned 4
	[0043.117] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0043.117] lstrlenW (lpString=".rar") returned 4
	[0043.117] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0043.117] lstrlenW (lpString=".bz2") returned 4
	[0043.117] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0043.117] lstrlenW (lpString=".7z") returned 3
	[0043.117] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0043.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106
	[0043.117] lstrlenW (lpString=".dbf") returned 4
	[0043.117] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0043.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106
	[0043.117] lstrlenW (lpString=".1cd") returned 4
	[0043.117] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0043.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML") returned 106
	[0043.117] lstrlenW (lpString=".jpg") returned 4
	[0043.117] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0043.117] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0043.117] lstrlenW (lpString="VisiorWW.XML") returned 12
	[0043.117] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0043.118] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=8723) returned 1
	[0043.118] CloseHandle (hObject=0x1ec) returned 1
	[0043.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml")) returned 0x20
	[0043.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0043.118] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0043.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.118] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0043.306] GetLastError () returned 0x0
	[0043.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x2213, lpOverlapped=0x0) returned 1
	[0043.309] WriteFile (in: hFile=0x1e4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x2220, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x2220, lpOverlapped=0x0) returned 1
	[0043.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0043.310] WriteFile (in: hFile=0x1e4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0043.310] SetEndOfFile (hFile=0x1e4) returned 1
	[0043.310] CloseHandle (hObject=0x1e4) returned 1
	[0043.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.311] SetEndOfFile (hFile=0x1ec) returned 1
	[0043.311] CloseHandle (hObject=0x1ec) returned 1
	[0043.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0043.312] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml")) returned 1
	[0043.312] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99
	[0043.312] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99
	[0043.312] lstrlenW (lpString=".doc") returned 4
	[0043.312] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0043.312] lstrlenW (lpString=".docx") returned 5
	[0043.312] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1
	[0043.312] lstrlenW (lpString=".pdf") returned 4
	[0043.312] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0043.312] lstrlenW (lpString=".xls") returned 4
	[0043.312] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0043.312] lstrlenW (lpString=".xlsx") returned 5
	[0043.312] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1
	[0043.312] lstrlenW (lpString=".ppt") returned 4
	[0043.312] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0043.312] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99
	[0043.312] lstrlenW (lpString=".zip") returned 4
	[0043.312] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0043.312] lstrlenW (lpString=".rar") returned 4
	[0043.312] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0043.313] lstrlenW (lpString=".bz2") returned 4
	[0043.313] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0043.313] lstrlenW (lpString=".7z") returned 3
	[0043.313] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0043.313] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99
	[0043.313] lstrlenW (lpString=".dbf") returned 4
	[0043.313] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0043.313] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99
	[0043.313] lstrlenW (lpString=".1cd") returned 4
	[0043.313] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0043.313] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99
	[0043.313] lstrlenW (lpString=".jpg") returned 4
	[0043.313] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0043.313] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99
	[0043.313] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99
	[0043.313] lstrlenW (lpString=".doc") returned 4
	[0043.313] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0043.313] lstrlenW (lpString=".docx") returned 5
	[0043.313] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1
	[0043.313] lstrlenW (lpString=".pdf") returned 4
	[0043.313] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0043.313] lstrlenW (lpString=".xls") returned 4
	[0043.313] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0043.313] lstrlenW (lpString=".xlsx") returned 5
	[0043.313] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1
	[0043.313] lstrlenW (lpString=".ppt") returned 4
	[0043.313] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0043.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99
	[0043.314] lstrlenW (lpString=".zip") returned 4
	[0043.314] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0043.314] lstrlenW (lpString=".rar") returned 4
	[0043.314] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0043.314] lstrlenW (lpString=".bz2") returned 4
	[0043.314] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0043.314] lstrlenW (lpString=".7z") returned 3
	[0043.314] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0043.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99
	[0043.314] lstrlenW (lpString=".dbf") returned 4
	[0043.314] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0043.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99
	[0043.314] lstrlenW (lpString=".1cd") returned 4
	[0043.314] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0043.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML") returned 99
	[0043.314] lstrlenW (lpString=".jpg") returned 4
	[0043.314] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0043.314] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0043.314] lstrlenW (lpString="SETUP.XML") returned 9
	[0043.314] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0043.315] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=2424) returned 1
	[0043.315] CloseHandle (hObject=0x1ec) returned 1
	[0043.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml")) returned 0x20
	[0043.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0043.315] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0043.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.316] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0043.316] GetLastError () returned 0x0
	[0043.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x978, lpOverlapped=0x0) returned 1
	[0043.317] WriteFile (in: hFile=0x1e4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x980, lpOverlapped=0x0) returned 1
	[0043.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0043.318] WriteFile (in: hFile=0x1e4, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0043.318] SetEndOfFile (hFile=0x1e4) returned 1
	[0043.319] CloseHandle (hObject=0x1e4) returned 1
	[0043.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.319] SetEndOfFile (hFile=0x1ec) returned 1
	[0043.320] CloseHandle (hObject=0x1ec) returned 1
	[0043.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0043.321] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml")) returned 1
	[0043.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0043.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0043.321] lstrlenW (lpString=".doc") returned 4
	[0043.321] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0043.321] lstrlenW (lpString=".docx") returned 5
	[0043.321] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0043.321] lstrlenW (lpString=".pdf") returned 4
	[0043.321] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0043.321] lstrlenW (lpString=".xls") returned 4
	[0043.321] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0043.321] lstrlenW (lpString=".xlsx") returned 5
	[0043.321] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0043.322] lstrlenW (lpString=".ppt") returned 4
	[0043.322] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0043.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0043.322] lstrlenW (lpString=".zip") returned 4
	[0043.322] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0043.322] lstrlenW (lpString=".rar") returned 4
	[0043.322] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0043.322] lstrlenW (lpString=".bz2") returned 4
	[0043.322] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0043.322] lstrlenW (lpString=".7z") returned 3
	[0043.322] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0043.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0043.322] lstrlenW (lpString=".dbf") returned 4
	[0043.322] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0043.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0043.322] lstrlenW (lpString=".1cd") returned 4
	[0043.322] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0043.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0043.322] lstrlenW (lpString=".jpg") returned 4
	[0043.322] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0043.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0043.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0043.322] lstrlenW (lpString=".doc") returned 4
	[0043.322] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0043.322] lstrlenW (lpString=".docx") returned 5
	[0043.322] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0043.322] lstrlenW (lpString=".pdf") returned 4
	[0043.322] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0043.322] lstrlenW (lpString=".xls") returned 4
	[0043.322] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0043.322] lstrlenW (lpString=".xlsx") returned 5
	[0043.322] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0043.323] lstrlenW (lpString=".ppt") returned 4
	[0043.323] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0043.323] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0043.323] lstrlenW (lpString=".zip") returned 4
	[0043.323] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0043.323] lstrlenW (lpString=".rar") returned 4
	[0043.323] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0043.323] lstrlenW (lpString=".bz2") returned 4
	[0043.323] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0043.323] lstrlenW (lpString=".7z") returned 3
	[0043.323] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0043.323] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0043.323] lstrlenW (lpString=".dbf") returned 4
	[0043.323] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0043.323] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0043.323] lstrlenW (lpString=".1cd") returned 4
	[0043.323] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0043.323] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML") returned 100
	[0043.323] lstrlenW (lpString=".jpg") returned 4
	[0043.323] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0043.323] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0043.323] lstrlenW (lpString="WordMUI.XML") returned 11
	[0043.323] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0043.324] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1800) returned 1
	[0043.324] CloseHandle (hObject=0x1ec) returned 1
	[0043.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml")) returned 0x20
	[0043.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0043.324] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0043.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.324] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0043.469] GetLastError () returned 0x0
	[0043.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x708, lpOverlapped=0x0) returned 1
	[0043.594] WriteFile (in: hFile=0x224, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x710, lpOverlapped=0x0) returned 1
	[0043.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0043.595] WriteFile (in: hFile=0x224, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0043.596] SetEndOfFile (hFile=0x224) returned 1
	[0043.596] CloseHandle (hObject=0x224) returned 1
	[0043.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.596] SetEndOfFile (hFile=0x1ec) returned 1
	[0043.597] CloseHandle (hObject=0x1ec) returned 1
	[0043.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0043.598] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml")) returned 1
	[0043.598] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102
	[0043.598] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102
	[0043.598] lstrlenW (lpString=".doc") returned 4
	[0043.598] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0043.598] lstrlenW (lpString=".docx") returned 5
	[0043.598] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0043.598] lstrlenW (lpString=".pdf") returned 4
	[0043.598] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0043.598] lstrlenW (lpString=".xls") returned 4
	[0043.598] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0043.598] lstrlenW (lpString=".xlsx") returned 5
	[0043.598] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0043.598] lstrlenW (lpString=".ppt") returned 4
	[0043.598] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0043.598] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102
	[0043.598] lstrlenW (lpString=".zip") returned 4
	[0043.598] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0043.598] lstrlenW (lpString=".rar") returned 4
	[0043.598] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0043.598] lstrlenW (lpString=".bz2") returned 4
	[0043.598] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0043.599] lstrlenW (lpString=".7z") returned 3
	[0043.599] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0043.599] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102
	[0043.599] lstrlenW (lpString=".dbf") returned 4
	[0043.599] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0043.599] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102
	[0043.599] lstrlenW (lpString=".1cd") returned 4
	[0043.599] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0043.599] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102
	[0043.599] lstrlenW (lpString=".jpg") returned 4
	[0043.599] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0043.599] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102
	[0043.599] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102
	[0043.599] lstrlenW (lpString=".doc") returned 4
	[0043.599] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0043.599] lstrlenW (lpString=".docx") returned 5
	[0043.599] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0043.599] lstrlenW (lpString=".pdf") returned 4
	[0043.599] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0043.599] lstrlenW (lpString=".xls") returned 4
	[0043.599] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0043.599] lstrlenW (lpString=".xlsx") returned 5
	[0043.599] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0043.599] lstrlenW (lpString=".ppt") returned 4
	[0043.599] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0043.599] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102
	[0043.599] lstrlenW (lpString=".zip") returned 4
	[0043.599] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0043.599] lstrlenW (lpString=".rar") returned 4
	[0043.599] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0043.599] lstrlenW (lpString=".bz2") returned 4
	[0043.599] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0043.599] lstrlenW (lpString=".7z") returned 3
	[0043.600] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0043.600] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102
	[0043.600] lstrlenW (lpString=".dbf") returned 4
	[0043.600] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0043.600] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102
	[0043.600] lstrlenW (lpString=".1cd") returned 4
	[0043.600] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0043.600] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML") returned 102
	[0043.600] lstrlenW (lpString=".jpg") returned 4
	[0043.600] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0043.600] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0043.600] lstrlenW (lpString="DATES.XML") returned 9
	[0043.600] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0043.600] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=8918) returned 1
	[0043.600] CloseHandle (hObject=0x1ec) returned 1
	[0043.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml")) returned 0x20
	[0043.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0043.601] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0043.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.601] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0044.515] GetLastError () returned 0x0
	[0044.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x22d6, lpOverlapped=0x0) returned 1
	[0044.798] WriteFile (in: hFile=0x220, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x22e0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x22e0, lpOverlapped=0x0) returned 1
	[0044.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0044.800] WriteFile (in: hFile=0x220, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0044.800] SetEndOfFile (hFile=0x220) returned 1
	[0044.811] CloseHandle (hObject=0x220) returned 1
	[0044.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.812] SetEndOfFile (hFile=0x1ec) returned 1
	[0044.813] CloseHandle (hObject=0x1ec) returned 1
	[0044.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0044.813] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml")) returned 1
	[0044.813] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0044.813] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0044.814] lstrlenW (lpString=".doc") returned 4
	[0044.814] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0044.814] lstrlenW (lpString=".docx") returned 5
	[0044.814] lstrcmpiW (lpString1=".docx", lpString2="S.XML") returned -1
	[0044.814] lstrlenW (lpString=".pdf") returned 4
	[0044.814] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0044.814] lstrlenW (lpString=".xls") returned 4
	[0044.814] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0044.814] lstrlenW (lpString=".xlsx") returned 5
	[0044.814] lstrcmpiW (lpString1=".xlsx", lpString2="S.XML") returned -1
	[0044.814] lstrlenW (lpString=".ppt") returned 4
	[0044.814] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0044.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0044.814] lstrlenW (lpString=".zip") returned 4
	[0044.814] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0044.814] lstrlenW (lpString=".rar") returned 4
	[0044.814] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0044.814] lstrlenW (lpString=".bz2") returned 4
	[0044.814] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0044.814] lstrlenW (lpString=".7z") returned 3
	[0044.814] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0044.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0044.814] lstrlenW (lpString=".dbf") returned 4
	[0044.814] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0044.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0044.814] lstrlenW (lpString=".1cd") returned 4
	[0044.814] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0044.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0044.814] lstrlenW (lpString=".jpg") returned 4
	[0044.814] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0044.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0044.814] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0044.815] lstrlenW (lpString=".doc") returned 4
	[0044.815] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0044.815] lstrlenW (lpString=".docx") returned 5
	[0044.815] lstrcmpiW (lpString1=".docx", lpString2="S.XML") returned -1
	[0044.815] lstrlenW (lpString=".pdf") returned 4
	[0044.815] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0044.815] lstrlenW (lpString=".xls") returned 4
	[0044.815] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0044.815] lstrlenW (lpString=".xlsx") returned 5
	[0044.815] lstrcmpiW (lpString1=".xlsx", lpString2="S.XML") returned -1
	[0044.815] lstrlenW (lpString=".ppt") returned 4
	[0044.815] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0044.815] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0044.815] lstrlenW (lpString=".zip") returned 4
	[0044.815] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0044.815] lstrlenW (lpString=".rar") returned 4
	[0044.815] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0044.815] lstrlenW (lpString=".bz2") returned 4
	[0044.815] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0044.815] lstrlenW (lpString=".7z") returned 3
	[0044.815] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0044.815] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0044.815] lstrlenW (lpString=".dbf") returned 4
	[0044.815] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0044.815] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0044.815] lstrlenW (lpString=".1cd") returned 4
	[0044.815] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0044.815] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML") returned 77
	[0044.815] lstrlenW (lpString=".jpg") returned 4
	[0044.815] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0044.816] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0044.816] lstrlenW (lpString="TIME.XML") returned 8
	[0044.816] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0044.816] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=8564) returned 1
	[0044.816] CloseHandle (hObject=0x1ec) returned 1
	[0044.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml")) returned 0x20
	[0044.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0044.816] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0044.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.817] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0044.817] GetLastError () returned 0x0
	[0044.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x2174, lpOverlapped=0x0) returned 1
	[0044.842] WriteFile (in: hFile=0x220, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x2180, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x2180, lpOverlapped=0x0) returned 1
	[0044.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0044.843] WriteFile (in: hFile=0x220, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe4, lpOverlapped=0x0) returned 1
	[0044.844] SetEndOfFile (hFile=0x220) returned 1
	[0044.844] CloseHandle (hObject=0x220) returned 1
	[0044.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.844] SetEndOfFile (hFile=0x1ec) returned 1
	[0044.845] CloseHandle (hObject=0x1ec) returned 1
	[0044.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0044.846] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml")) returned 1
	[0044.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76
	[0044.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76
	[0044.846] lstrlenW (lpString=".doc") returned 4
	[0044.846] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0044.846] lstrlenW (lpString=".docx") returned 5
	[0044.846] lstrcmpiW (lpString1=".docx", lpString2="E.XML") returned -1
	[0044.846] lstrlenW (lpString=".pdf") returned 4
	[0044.846] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0044.846] lstrlenW (lpString=".xls") returned 4
	[0044.846] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0044.846] lstrlenW (lpString=".xlsx") returned 5
	[0044.846] lstrcmpiW (lpString1=".xlsx", lpString2="E.XML") returned -1
	[0044.846] lstrlenW (lpString=".ppt") returned 4
	[0044.846] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0044.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76
	[0044.846] lstrlenW (lpString=".zip") returned 4
	[0044.846] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0044.846] lstrlenW (lpString=".rar") returned 4
	[0044.846] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0044.846] lstrlenW (lpString=".bz2") returned 4
	[0044.846] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0044.846] lstrlenW (lpString=".7z") returned 3
	[0044.846] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0044.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76
	[0044.846] lstrlenW (lpString=".dbf") returned 4
	[0044.846] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0044.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76
	[0044.847] lstrlenW (lpString=".1cd") returned 4
	[0044.847] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0044.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76
	[0044.847] lstrlenW (lpString=".jpg") returned 4
	[0044.847] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0044.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76
	[0044.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76
	[0044.847] lstrlenW (lpString=".doc") returned 4
	[0044.847] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0044.847] lstrlenW (lpString=".docx") returned 5
	[0044.847] lstrcmpiW (lpString1=".docx", lpString2="E.XML") returned -1
	[0044.847] lstrlenW (lpString=".pdf") returned 4
	[0044.847] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0044.847] lstrlenW (lpString=".xls") returned 4
	[0044.847] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0044.847] lstrlenW (lpString=".xlsx") returned 5
	[0044.847] lstrcmpiW (lpString1=".xlsx", lpString2="E.XML") returned -1
	[0044.847] lstrlenW (lpString=".ppt") returned 4
	[0044.847] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0044.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76
	[0044.847] lstrlenW (lpString=".zip") returned 4
	[0044.847] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0044.847] lstrlenW (lpString=".rar") returned 4
	[0044.847] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0044.847] lstrlenW (lpString=".bz2") returned 4
	[0044.847] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0044.847] lstrlenW (lpString=".7z") returned 3
	[0044.847] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0044.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76
	[0044.848] lstrlenW (lpString=".dbf") returned 4
	[0044.848] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0044.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76
	[0044.848] lstrlenW (lpString=".1cd") returned 4
	[0044.848] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0044.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML") returned 76
	[0044.848] lstrlenW (lpString=".jpg") returned 4
	[0044.848] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0044.848] lstrcmpiW (lpString1=".XSL", lpString2=".beets") returned 1
	[0044.848] lstrlenW (lpString="BASMLA.XSL") returned 10
	[0044.848] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0044.848] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=227311) returned 1
	[0044.848] CloseHandle (hObject=0x1ec) returned 1
	[0044.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl")) returned 0x20
	[0044.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0044.849] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0044.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.849] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0044.849] GetLastError () returned 0x0
	[0044.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x377ef, lpOverlapped=0x0) returned 1
	[0044.856] WriteFile (in: hFile=0x220, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x377f0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x377f0, lpOverlapped=0x0) returned 1
	[0044.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0044.860] WriteFile (in: hFile=0x220, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0044.860] SetEndOfFile (hFile=0x220) returned 1
	[0044.861] CloseHandle (hObject=0x220) returned 1
	[0044.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.863] SetEndOfFile (hFile=0x1ec) returned 1
	[0044.865] CloseHandle (hObject=0x1ec) returned 1
	[0044.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0044.865] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl")) returned 1
	[0044.865] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73
	[0044.865] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73
	[0044.865] lstrlenW (lpString=".doc") returned 4
	[0044.865] lstrcmpiW (lpString1=".doc", lpString2=".XSL") returned -1
	[0044.865] lstrlenW (lpString=".docx") returned 5
	[0044.866] lstrcmpiW (lpString1=".docx", lpString2="A.XSL") returned -1
	[0044.866] lstrlenW (lpString=".pdf") returned 4
	[0044.866] lstrcmpiW (lpString1=".pdf", lpString2=".XSL") returned -1
	[0044.866] lstrlenW (lpString=".xls") returned 4
	[0044.866] lstrcmpiW (lpString1=".xls", lpString2=".XSL") returned -1
	[0044.866] lstrlenW (lpString=".xlsx") returned 5
	[0044.866] lstrcmpiW (lpString1=".xlsx", lpString2="A.XSL") returned -1
	[0044.866] lstrlenW (lpString=".ppt") returned 4
	[0044.866] lstrcmpiW (lpString1=".ppt", lpString2=".XSL") returned -1
	[0044.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73
	[0044.866] lstrlenW (lpString=".zip") returned 4
	[0044.866] lstrcmpiW (lpString1=".zip", lpString2=".XSL") returned 1
	[0044.866] lstrlenW (lpString=".rar") returned 4
	[0044.866] lstrcmpiW (lpString1=".rar", lpString2=".XSL") returned -1
	[0044.866] lstrlenW (lpString=".bz2") returned 4
	[0044.866] lstrcmpiW (lpString1=".bz2", lpString2=".XSL") returned -1
	[0044.866] lstrlenW (lpString=".7z") returned 3
	[0044.866] lstrcmpiW (lpString1=".7z", lpString2="XSL") returned -1
	[0044.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73
	[0044.866] lstrlenW (lpString=".dbf") returned 4
	[0044.866] lstrcmpiW (lpString1=".dbf", lpString2=".XSL") returned -1
	[0044.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73
	[0044.866] lstrlenW (lpString=".1cd") returned 4
	[0044.866] lstrcmpiW (lpString1=".1cd", lpString2=".XSL") returned -1
	[0044.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73
	[0044.866] lstrlenW (lpString=".jpg") returned 4
	[0044.866] lstrcmpiW (lpString1=".jpg", lpString2=".XSL") returned -1
	[0044.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73
	[0044.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73
	[0044.866] lstrlenW (lpString=".doc") returned 4
	[0044.866] lstrcmpiW (lpString1=".doc", lpString2=".XSL") returned -1
	[0044.866] lstrlenW (lpString=".docx") returned 5
	[0044.867] lstrcmpiW (lpString1=".docx", lpString2="A.XSL") returned -1
	[0044.867] lstrlenW (lpString=".pdf") returned 4
	[0044.867] lstrcmpiW (lpString1=".pdf", lpString2=".XSL") returned -1
	[0044.867] lstrlenW (lpString=".xls") returned 4
	[0044.867] lstrcmpiW (lpString1=".xls", lpString2=".XSL") returned -1
	[0044.867] lstrlenW (lpString=".xlsx") returned 5
	[0044.867] lstrcmpiW (lpString1=".xlsx", lpString2="A.XSL") returned -1
	[0044.867] lstrlenW (lpString=".ppt") returned 4
	[0044.867] lstrcmpiW (lpString1=".ppt", lpString2=".XSL") returned -1
	[0044.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73
	[0044.867] lstrlenW (lpString=".zip") returned 4
	[0044.867] lstrcmpiW (lpString1=".zip", lpString2=".XSL") returned 1
	[0044.867] lstrlenW (lpString=".rar") returned 4
	[0044.867] lstrcmpiW (lpString1=".rar", lpString2=".XSL") returned -1
	[0044.867] lstrlenW (lpString=".bz2") returned 4
	[0044.867] lstrcmpiW (lpString1=".bz2", lpString2=".XSL") returned -1
	[0044.867] lstrlenW (lpString=".7z") returned 3
	[0044.867] lstrcmpiW (lpString1=".7z", lpString2="XSL") returned -1
	[0044.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73
	[0044.867] lstrlenW (lpString=".dbf") returned 4
	[0044.867] lstrcmpiW (lpString1=".dbf", lpString2=".XSL") returned -1
	[0044.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73
	[0044.867] lstrlenW (lpString=".1cd") returned 4
	[0044.867] lstrcmpiW (lpString1=".1cd", lpString2=".XSL") returned -1
	[0044.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL") returned 73
	[0044.867] lstrlenW (lpString=".jpg") returned 4
	[0044.867] lstrcmpiW (lpString1=".jpg", lpString2=".XSL") returned -1
	[0044.867] lstrcmpiW (lpString1=".TXT", lpString2=".beets") returned 1
	[0044.868] lstrlenW (lpString="METCONV.TXT") returned 11
	[0044.868] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0045.975] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1183416) returned 1
	[0045.975] CloseHandle (hObject=0x224) returned 1
	[0045.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt")) returned 0x20
	[0045.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0045.984] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0046.012] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.012] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.012] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0046.012] GetLastError () returned 0x0
	[0046.013] ReadFile (in: hFile=0x220, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0xffff0, lpOverlapped=0x0) returned 1
	[0046.034] WriteFile (in: hFile=0x21c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xffff0, lpOverlapped=0x0) returned 1
	[0046.052] ReadFile (in: hFile=0x220, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x20ec8, lpOverlapped=0x0) returned 1
	[0046.272] WriteFile (in: hFile=0x21c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x20ed0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x20ed0, lpOverlapped=0x0) returned 1
	[0046.277] ReadFile (in: hFile=0x220, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0046.277] WriteFile (in: hFile=0x21c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0046.277] SetEndOfFile (hFile=0x21c) returned 1
	[0046.278] CloseHandle (hObject=0x21c) returned 1
	[0046.290] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.290] SetEndOfFile (hFile=0x220) returned 1
	[0046.291] CloseHandle (hObject=0x220) returned 1
	[0046.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0046.292] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt")) returned 1
	[0046.292] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68
	[0046.292] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68
	[0046.292] lstrlenW (lpString=".doc") returned 4
	[0046.292] lstrcmpiW (lpString1=".doc", lpString2=".TXT") returned -1
	[0046.292] lstrlenW (lpString=".docx") returned 5
	[0046.292] lstrcmpiW (lpString1=".docx", lpString2="V.TXT") returned -1
	[0046.292] lstrlenW (lpString=".pdf") returned 4
	[0046.292] lstrcmpiW (lpString1=".pdf", lpString2=".TXT") returned -1
	[0046.292] lstrlenW (lpString=".xls") returned 4
	[0046.292] lstrcmpiW (lpString1=".xls", lpString2=".TXT") returned 1
	[0046.292] lstrlenW (lpString=".xlsx") returned 5
	[0046.292] lstrcmpiW (lpString1=".xlsx", lpString2="V.TXT") returned -1
	[0046.292] lstrlenW (lpString=".ppt") returned 4
	[0046.292] lstrcmpiW (lpString1=".ppt", lpString2=".TXT") returned -1
	[0046.292] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68
	[0046.292] lstrlenW (lpString=".zip") returned 4
	[0046.292] lstrcmpiW (lpString1=".zip", lpString2=".TXT") returned 1
	[0046.292] lstrlenW (lpString=".rar") returned 4
	[0046.292] lstrcmpiW (lpString1=".rar", lpString2=".TXT") returned -1
	[0046.292] lstrlenW (lpString=".bz2") returned 4
	[0046.292] lstrcmpiW (lpString1=".bz2", lpString2=".TXT") returned -1
	[0046.292] lstrlenW (lpString=".7z") returned 3
	[0046.292] lstrcmpiW (lpString1=".7z", lpString2="TXT") returned -1
	[0046.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68
	[0046.293] lstrlenW (lpString=".dbf") returned 4
	[0046.293] lstrcmpiW (lpString1=".dbf", lpString2=".TXT") returned -1
	[0046.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68
	[0046.293] lstrlenW (lpString=".1cd") returned 4
	[0046.293] lstrcmpiW (lpString1=".1cd", lpString2=".TXT") returned -1
	[0046.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68
	[0046.293] lstrlenW (lpString=".jpg") returned 4
	[0046.293] lstrcmpiW (lpString1=".jpg", lpString2=".TXT") returned -1
	[0046.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68
	[0046.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68
	[0046.293] lstrlenW (lpString=".doc") returned 4
	[0046.293] lstrcmpiW (lpString1=".doc", lpString2=".TXT") returned -1
	[0046.293] lstrlenW (lpString=".docx") returned 5
	[0046.293] lstrcmpiW (lpString1=".docx", lpString2="V.TXT") returned -1
	[0046.293] lstrlenW (lpString=".pdf") returned 4
	[0046.293] lstrcmpiW (lpString1=".pdf", lpString2=".TXT") returned -1
	[0046.293] lstrlenW (lpString=".xls") returned 4
	[0046.293] lstrcmpiW (lpString1=".xls", lpString2=".TXT") returned 1
	[0046.294] lstrlenW (lpString=".xlsx") returned 5
	[0046.294] lstrcmpiW (lpString1=".xlsx", lpString2="V.TXT") returned -1
	[0046.294] lstrlenW (lpString=".ppt") returned 4
	[0046.294] lstrcmpiW (lpString1=".ppt", lpString2=".TXT") returned -1
	[0046.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68
	[0046.294] lstrlenW (lpString=".zip") returned 4
	[0046.294] lstrcmpiW (lpString1=".zip", lpString2=".TXT") returned 1
	[0046.294] lstrlenW (lpString=".rar") returned 4
	[0046.294] lstrcmpiW (lpString1=".rar", lpString2=".TXT") returned -1
	[0046.294] lstrlenW (lpString=".bz2") returned 4
	[0046.294] lstrcmpiW (lpString1=".bz2", lpString2=".TXT") returned -1
	[0046.294] lstrlenW (lpString=".7z") returned 3
	[0046.294] lstrcmpiW (lpString1=".7z", lpString2="TXT") returned -1
	[0046.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68
	[0046.294] lstrlenW (lpString=".dbf") returned 4
	[0046.294] lstrcmpiW (lpString1=".dbf", lpString2=".TXT") returned -1
	[0046.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68
	[0046.294] lstrlenW (lpString=".1cd") returned 4
	[0046.294] lstrcmpiW (lpString1=".1cd", lpString2=".TXT") returned -1
	[0046.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT") returned 68
	[0046.294] lstrlenW (lpString=".jpg") returned 4
	[0046.294] lstrcmpiW (lpString1=".jpg", lpString2=".TXT") returned -1
	[0046.294] lstrcmpiW (lpString1=".emf", lpString2=".beets") returned 1
	[0046.294] lstrlenW (lpString="Genko_2.emf") returned 11
	[0046.294] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0046.670] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=10340) returned 1
	[0046.671] CloseHandle (hObject=0x200) returned 1
	[0046.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf")) returned 0x20
	[0046.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.671] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69
	[0046.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69
	[0046.671] lstrlenW (lpString=".doc") returned 4
	[0046.671] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1
	[0046.671] lstrlenW (lpString=".docx") returned 5
	[0046.671] lstrcmpiW (lpString1=".docx", lpString2="2.emf") returned -1
	[0046.671] lstrlenW (lpString=".pdf") returned 4
	[0046.671] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1
	[0046.671] lstrlenW (lpString=".xls") returned 4
	[0046.671] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1
	[0046.671] lstrlenW (lpString=".xlsx") returned 5
	[0046.671] lstrcmpiW (lpString1=".xlsx", lpString2="2.emf") returned -1
	[0046.671] lstrlenW (lpString=".ppt") returned 4
	[0046.671] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1
	[0046.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69
	[0046.671] lstrlenW (lpString=".zip") returned 4
	[0046.671] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1
	[0046.671] lstrlenW (lpString=".rar") returned 4
	[0046.671] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1
	[0046.671] lstrlenW (lpString=".bz2") returned 4
	[0046.672] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1
	[0046.672] lstrlenW (lpString=".7z") returned 3
	[0046.672] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1
	[0046.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69
	[0046.672] lstrlenW (lpString=".dbf") returned 4
	[0046.672] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1
	[0046.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69
	[0046.672] lstrlenW (lpString=".1cd") returned 4
	[0046.672] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1
	[0046.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69
	[0046.672] lstrlenW (lpString=".jpg") returned 4
	[0046.672] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1
	[0046.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69
	[0046.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69
	[0046.672] lstrlenW (lpString=".doc") returned 4
	[0046.672] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1
	[0046.672] lstrlenW (lpString=".docx") returned 5
	[0046.672] lstrcmpiW (lpString1=".docx", lpString2="2.emf") returned -1
	[0046.672] lstrlenW (lpString=".pdf") returned 4
	[0046.672] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1
	[0046.672] lstrlenW (lpString=".xls") returned 4
	[0046.672] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1
	[0046.672] lstrlenW (lpString=".xlsx") returned 5
	[0046.672] lstrcmpiW (lpString1=".xlsx", lpString2="2.emf") returned -1
	[0046.672] lstrlenW (lpString=".ppt") returned 4
	[0046.672] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1
	[0046.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69
	[0046.672] lstrlenW (lpString=".zip") returned 4
	[0046.672] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1
	[0046.672] lstrlenW (lpString=".rar") returned 4
	[0046.672] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1
	[0046.672] lstrlenW (lpString=".bz2") returned 4
	[0046.672] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1
	[0046.673] lstrlenW (lpString=".7z") returned 3
	[0046.673] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1
	[0046.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69
	[0046.673] lstrlenW (lpString=".dbf") returned 4
	[0046.673] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1
	[0046.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69
	[0046.673] lstrlenW (lpString=".1cd") returned 4
	[0046.673] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1
	[0046.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf") returned 69
	[0046.673] lstrlenW (lpString=".jpg") returned 4
	[0046.673] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1
	[0046.673] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0046.673] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0046.673] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0046.899] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=2181) returned 1
	[0046.899] CloseHandle (hObject=0x20c) returned 1
	[0046.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif")) returned 0x20
	[0046.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.899] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0046.900] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.900] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.900] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0047.218] GetLastError () returned 0x0
	[0047.218] ReadFile (in: hFile=0x20c, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x885, lpOverlapped=0x0) returned 1
	[0047.249] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x890, lpOverlapped=0x0) returned 1
	[0047.251] ReadFile (in: hFile=0x20c, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.251] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0047.251] SetEndOfFile (hFile=0x210) returned 1
	[0047.251] CloseHandle (hObject=0x210) returned 1
	[0047.251] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.252] SetEndOfFile (hFile=0x20c) returned 1
	[0047.252] CloseHandle (hObject=0x20c) returned 1
	[0047.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.253] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif")) returned 1
	[0047.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74
	[0047.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74
	[0047.253] lstrlenW (lpString=".doc") returned 4
	[0047.253] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.253] lstrlenW (lpString=".docx") returned 5
	[0047.253] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.253] lstrlenW (lpString=".pdf") returned 4
	[0047.253] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.253] lstrlenW (lpString=".xls") returned 4
	[0047.253] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.253] lstrlenW (lpString=".xlsx") returned 5
	[0047.253] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.253] lstrlenW (lpString=".ppt") returned 4
	[0047.253] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74
	[0047.253] lstrlenW (lpString=".zip") returned 4
	[0047.253] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.253] lstrlenW (lpString=".rar") returned 4
	[0047.253] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.253] lstrlenW (lpString=".bz2") returned 4
	[0047.253] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.253] lstrlenW (lpString=".7z") returned 3
	[0047.253] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74
	[0047.253] lstrlenW (lpString=".dbf") returned 4
	[0047.253] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74
	[0047.254] lstrlenW (lpString=".1cd") returned 4
	[0047.254] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74
	[0047.254] lstrlenW (lpString=".jpg") returned 4
	[0047.254] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74
	[0047.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74
	[0047.254] lstrlenW (lpString=".doc") returned 4
	[0047.254] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.254] lstrlenW (lpString=".docx") returned 5
	[0047.254] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.254] lstrlenW (lpString=".pdf") returned 4
	[0047.254] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.254] lstrlenW (lpString=".xls") returned 4
	[0047.254] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.254] lstrlenW (lpString=".xlsx") returned 5
	[0047.254] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.254] lstrlenW (lpString=".ppt") returned 4
	[0047.254] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74
	[0047.254] lstrlenW (lpString=".zip") returned 4
	[0047.254] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.254] lstrlenW (lpString=".rar") returned 4
	[0047.254] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.254] lstrlenW (lpString=".bz2") returned 4
	[0047.254] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.254] lstrlenW (lpString=".7z") returned 3
	[0047.254] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74
	[0047.254] lstrlenW (lpString=".dbf") returned 4
	[0047.254] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74
	[0047.254] lstrlenW (lpString=".1cd") returned 4
	[0047.255] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF") returned 74
	[0047.255] lstrlenW (lpString=".jpg") returned 4
	[0047.255] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.255] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0047.255] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0047.255] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0047.255] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=32607) returned 1
	[0047.255] CloseHandle (hObject=0x20c) returned 1
	[0047.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png")) returned 0x20
	[0047.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.255] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0047.255] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.256] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.256] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0047.256] GetLastError () returned 0x0
	[0047.256] ReadFile (in: hFile=0x20c, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x7f5f, lpOverlapped=0x0) returned 1
	[0047.263] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x7f60, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x7f60, lpOverlapped=0x0) returned 1
	[0047.265] ReadFile (in: hFile=0x20c, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.265] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0047.265] SetEndOfFile (hFile=0x210) returned 1
	[0047.265] CloseHandle (hObject=0x210) returned 1
	[0047.265] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.265] SetEndOfFile (hFile=0x20c) returned 1
	[0047.266] CloseHandle (hObject=0x20c) returned 1
	[0047.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.266] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png")) returned 1
	[0047.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75
	[0047.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75
	[0047.267] lstrlenW (lpString=".doc") returned 4
	[0047.267] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.267] lstrlenW (lpString=".docx") returned 5
	[0047.267] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.267] lstrlenW (lpString=".pdf") returned 4
	[0047.267] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.267] lstrlenW (lpString=".xls") returned 4
	[0047.267] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.267] lstrlenW (lpString=".xlsx") returned 5
	[0047.267] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.267] lstrlenW (lpString=".ppt") returned 4
	[0047.267] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75
	[0047.267] lstrlenW (lpString=".zip") returned 4
	[0047.267] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.267] lstrlenW (lpString=".rar") returned 4
	[0047.267] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.267] lstrlenW (lpString=".bz2") returned 4
	[0047.267] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.267] lstrlenW (lpString=".7z") returned 3
	[0047.267] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75
	[0047.267] lstrlenW (lpString=".dbf") returned 4
	[0047.267] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75
	[0047.267] lstrlenW (lpString=".1cd") returned 4
	[0047.267] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75
	[0047.268] lstrlenW (lpString=".jpg") returned 4
	[0047.268] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75
	[0047.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75
	[0047.268] lstrlenW (lpString=".doc") returned 4
	[0047.268] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.268] lstrlenW (lpString=".docx") returned 5
	[0047.268] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.268] lstrlenW (lpString=".pdf") returned 4
	[0047.268] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.268] lstrlenW (lpString=".xls") returned 4
	[0047.268] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.268] lstrlenW (lpString=".xlsx") returned 5
	[0047.268] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.268] lstrlenW (lpString=".ppt") returned 4
	[0047.268] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75
	[0047.268] lstrlenW (lpString=".zip") returned 4
	[0047.268] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.268] lstrlenW (lpString=".rar") returned 4
	[0047.268] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.268] lstrlenW (lpString=".bz2") returned 4
	[0047.268] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.268] lstrlenW (lpString=".7z") returned 3
	[0047.268] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75
	[0047.268] lstrlenW (lpString=".dbf") returned 4
	[0047.268] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75
	[0047.268] lstrlenW (lpString=".1cd") returned 4
	[0047.268] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.269] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG") returned 75
	[0047.269] lstrlenW (lpString=".jpg") returned 4
	[0047.269] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.269] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0047.269] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0047.269] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0048.063] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=29925) returned 1
	[0048.063] CloseHandle (hObject=0x214) returned 1
	[0048.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png")) returned 0x20
	[0048.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.063] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0048.063] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.063] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.063] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0048.064] GetLastError () returned 0x0
	[0048.064] ReadFile (in: hFile=0x214, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x74e5, lpOverlapped=0x0) returned 1
	[0048.066] WriteFile (in: hFile=0x20c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x74f0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x74f0, lpOverlapped=0x0) returned 1
	[0048.067] ReadFile (in: hFile=0x214, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.067] WriteFile (in: hFile=0x20c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0048.067] SetEndOfFile (hFile=0x20c) returned 1
	[0048.067] CloseHandle (hObject=0x20c) returned 1
	[0048.067] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.067] SetEndOfFile (hFile=0x214) returned 1
	[0048.068] CloseHandle (hObject=0x214) returned 1
	[0048.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0048.069] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png")) returned 1
	[0048.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77
	[0048.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77
	[0048.069] lstrlenW (lpString=".doc") returned 4
	[0048.069] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0048.069] lstrlenW (lpString=".docx") returned 5
	[0048.069] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0048.069] lstrlenW (lpString=".pdf") returned 4
	[0048.069] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0048.069] lstrlenW (lpString=".xls") returned 4
	[0048.069] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0048.069] lstrlenW (lpString=".xlsx") returned 5
	[0048.069] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0048.069] lstrlenW (lpString=".ppt") returned 4
	[0048.069] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0048.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77
	[0048.069] lstrlenW (lpString=".zip") returned 4
	[0048.069] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0048.069] lstrlenW (lpString=".rar") returned 4
	[0048.069] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0048.069] lstrlenW (lpString=".bz2") returned 4
	[0048.069] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0048.069] lstrlenW (lpString=".7z") returned 3
	[0048.069] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0048.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77
	[0048.070] lstrlenW (lpString=".dbf") returned 4
	[0048.070] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0048.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77
	[0048.070] lstrlenW (lpString=".1cd") returned 4
	[0048.070] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0048.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77
	[0048.070] lstrlenW (lpString=".jpg") returned 4
	[0048.070] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0048.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77
	[0048.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77
	[0048.070] lstrlenW (lpString=".doc") returned 4
	[0048.070] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0048.070] lstrlenW (lpString=".docx") returned 5
	[0048.070] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0048.070] lstrlenW (lpString=".pdf") returned 4
	[0048.070] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0048.070] lstrlenW (lpString=".xls") returned 4
	[0048.070] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0048.070] lstrlenW (lpString=".xlsx") returned 5
	[0048.070] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0048.070] lstrlenW (lpString=".ppt") returned 4
	[0048.070] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0048.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77
	[0048.070] lstrlenW (lpString=".zip") returned 4
	[0048.070] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0048.070] lstrlenW (lpString=".rar") returned 4
	[0048.070] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0048.070] lstrlenW (lpString=".bz2") returned 4
	[0048.070] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0048.070] lstrlenW (lpString=".7z") returned 3
	[0048.070] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0048.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77
	[0048.071] lstrlenW (lpString=".dbf") returned 4
	[0048.071] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0048.071] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77
	[0048.071] lstrlenW (lpString=".1cd") returned 4
	[0048.071] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0048.071] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG") returned 77
	[0048.071] lstrlenW (lpString=".jpg") returned 4
	[0048.071] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0048.071] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0048.071] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0048.071] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0048.072] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=3957) returned 1
	[0048.072] CloseHandle (hObject=0x214) returned 1
	[0048.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif")) returned 0x20
	[0048.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.072] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0048.072] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.072] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.072] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0048.074] GetLastError () returned 0x0
	[0048.074] ReadFile (in: hFile=0x214, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0xf75, lpOverlapped=0x0) returned 1
	[0048.075] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xf80, lpOverlapped=0x0) returned 1
	[0048.076] ReadFile (in: hFile=0x214, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.076] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0048.077] SetEndOfFile (hFile=0x210) returned 1
	[0048.077] CloseHandle (hObject=0x210) returned 1
	[0048.077] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.077] SetEndOfFile (hFile=0x214) returned 1
	[0048.078] CloseHandle (hObject=0x214) returned 1
	[0048.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0048.078] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif")) returned 1
	[0048.078] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76
	[0048.078] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76
	[0048.078] lstrlenW (lpString=".doc") returned 4
	[0048.078] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0048.078] lstrlenW (lpString=".docx") returned 5
	[0048.078] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0048.078] lstrlenW (lpString=".pdf") returned 4
	[0048.078] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0048.078] lstrlenW (lpString=".xls") returned 4
	[0048.078] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0048.078] lstrlenW (lpString=".xlsx") returned 5
	[0048.079] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0048.079] lstrlenW (lpString=".ppt") returned 4
	[0048.079] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0048.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76
	[0048.079] lstrlenW (lpString=".zip") returned 4
	[0048.079] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0048.079] lstrlenW (lpString=".rar") returned 4
	[0048.079] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0048.079] lstrlenW (lpString=".bz2") returned 4
	[0048.079] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0048.079] lstrlenW (lpString=".7z") returned 3
	[0048.079] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0048.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76
	[0048.079] lstrlenW (lpString=".dbf") returned 4
	[0048.079] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0048.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76
	[0048.079] lstrlenW (lpString=".1cd") returned 4
	[0048.079] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0048.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76
	[0048.079] lstrlenW (lpString=".jpg") returned 4
	[0048.079] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0048.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76
	[0048.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76
	[0048.079] lstrlenW (lpString=".doc") returned 4
	[0048.079] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0048.079] lstrlenW (lpString=".docx") returned 5
	[0048.079] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0048.079] lstrlenW (lpString=".pdf") returned 4
	[0048.079] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0048.079] lstrlenW (lpString=".xls") returned 4
	[0048.079] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0048.079] lstrlenW (lpString=".xlsx") returned 5
	[0048.080] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0048.080] lstrlenW (lpString=".ppt") returned 4
	[0048.080] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0048.080] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76
	[0048.080] lstrlenW (lpString=".zip") returned 4
	[0048.080] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0048.080] lstrlenW (lpString=".rar") returned 4
	[0048.080] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0048.080] lstrlenW (lpString=".bz2") returned 4
	[0048.080] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0048.080] lstrlenW (lpString=".7z") returned 3
	[0048.080] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0048.080] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76
	[0048.080] lstrlenW (lpString=".dbf") returned 4
	[0048.080] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0048.080] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76
	[0048.080] lstrlenW (lpString=".1cd") returned 4
	[0048.080] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0048.080] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF") returned 76
	[0048.080] lstrlenW (lpString=".jpg") returned 4
	[0048.080] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0048.080] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0048.080] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0048.080] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0048.081] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=33277) returned 1
	[0048.081] CloseHandle (hObject=0x214) returned 1
	[0048.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png")) returned 0x20
	[0048.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.082] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0048.082] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.082] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.082] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0048.082] GetLastError () returned 0x0
	[0048.082] ReadFile (in: hFile=0x214, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x81fd, lpOverlapped=0x0) returned 1
	[0048.084] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x8200, lpOverlapped=0x0) returned 1
	[0048.085] ReadFile (in: hFile=0x214, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.085] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0048.086] SetEndOfFile (hFile=0x210) returned 1
	[0048.086] CloseHandle (hObject=0x210) returned 1
	[0048.086] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.086] SetEndOfFile (hFile=0x214) returned 1
	[0048.087] CloseHandle (hObject=0x214) returned 1
	[0048.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0048.087] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png")) returned 1
	[0048.087] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77
	[0048.087] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77
	[0048.087] lstrlenW (lpString=".doc") returned 4
	[0048.087] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0048.087] lstrlenW (lpString=".docx") returned 5
	[0048.087] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0048.087] lstrlenW (lpString=".pdf") returned 4
	[0048.087] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0048.087] lstrlenW (lpString=".xls") returned 4
	[0048.088] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0048.088] lstrlenW (lpString=".xlsx") returned 5
	[0048.088] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0048.088] lstrlenW (lpString=".ppt") returned 4
	[0048.088] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0048.088] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77
	[0048.088] lstrlenW (lpString=".zip") returned 4
	[0048.088] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0048.088] lstrlenW (lpString=".rar") returned 4
	[0048.088] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0048.088] lstrlenW (lpString=".bz2") returned 4
	[0048.088] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0048.088] lstrlenW (lpString=".7z") returned 3
	[0048.088] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0048.088] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77
	[0048.088] lstrlenW (lpString=".dbf") returned 4
	[0048.088] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0048.088] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77
	[0048.088] lstrlenW (lpString=".1cd") returned 4
	[0048.088] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0048.088] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77
	[0048.088] lstrlenW (lpString=".jpg") returned 4
	[0048.088] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0048.088] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77
	[0048.088] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77
	[0048.088] lstrlenW (lpString=".doc") returned 4
	[0048.088] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0048.088] lstrlenW (lpString=".docx") returned 5
	[0048.088] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0048.088] lstrlenW (lpString=".pdf") returned 4
	[0048.088] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0048.088] lstrlenW (lpString=".xls") returned 4
	[0048.089] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0048.089] lstrlenW (lpString=".xlsx") returned 5
	[0048.089] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0048.089] lstrlenW (lpString=".ppt") returned 4
	[0048.089] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0048.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77
	[0048.089] lstrlenW (lpString=".zip") returned 4
	[0048.089] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0048.089] lstrlenW (lpString=".rar") returned 4
	[0048.089] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0048.089] lstrlenW (lpString=".bz2") returned 4
	[0048.089] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0048.089] lstrlenW (lpString=".7z") returned 3
	[0048.089] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0048.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77
	[0048.089] lstrlenW (lpString=".dbf") returned 4
	[0048.089] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0048.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77
	[0048.089] lstrlenW (lpString=".1cd") returned 4
	[0048.089] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0048.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG") returned 77
	[0048.089] lstrlenW (lpString=".jpg") returned 4
	[0048.089] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0048.089] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0048.089] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0048.089] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0048.090] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1453) returned 1
	[0048.090] CloseHandle (hObject=0x214) returned 1
	[0048.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif")) returned 0x20
	[0048.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.090] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0048.090] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.090] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.090] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0048.092] GetLastError () returned 0x0
	[0048.092] ReadFile (in: hFile=0x214, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x5ad, lpOverlapped=0x0) returned 1
	[0048.101] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x5b0, lpOverlapped=0x0) returned 1
	[0048.102] ReadFile (in: hFile=0x214, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.102] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0048.102] SetEndOfFile (hFile=0x210) returned 1
	[0048.102] CloseHandle (hObject=0x210) returned 1
	[0048.102] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.102] SetEndOfFile (hFile=0x214) returned 1
	[0048.103] CloseHandle (hObject=0x214) returned 1
	[0048.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0048.103] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif")) returned 1
	[0048.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72
	[0048.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72
	[0048.104] lstrlenW (lpString=".doc") returned 4
	[0048.104] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0048.104] lstrlenW (lpString=".docx") returned 5
	[0048.104] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0048.104] lstrlenW (lpString=".pdf") returned 4
	[0048.104] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0048.104] lstrlenW (lpString=".xls") returned 4
	[0048.104] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0048.104] lstrlenW (lpString=".xlsx") returned 5
	[0048.104] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0048.104] lstrlenW (lpString=".ppt") returned 4
	[0048.104] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0048.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72
	[0048.104] lstrlenW (lpString=".zip") returned 4
	[0048.104] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0048.104] lstrlenW (lpString=".rar") returned 4
	[0048.104] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0048.104] lstrlenW (lpString=".bz2") returned 4
	[0048.104] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0048.104] lstrlenW (lpString=".7z") returned 3
	[0048.104] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0048.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72
	[0048.104] lstrlenW (lpString=".dbf") returned 4
	[0048.104] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0048.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72
	[0048.104] lstrlenW (lpString=".1cd") returned 4
	[0048.104] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0048.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72
	[0048.104] lstrlenW (lpString=".jpg") returned 4
	[0048.104] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0048.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72
	[0048.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72
	[0048.105] lstrlenW (lpString=".doc") returned 4
	[0048.105] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0048.105] lstrlenW (lpString=".docx") returned 5
	[0048.105] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0048.105] lstrlenW (lpString=".pdf") returned 4
	[0048.105] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0048.105] lstrlenW (lpString=".xls") returned 4
	[0048.105] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0048.105] lstrlenW (lpString=".xlsx") returned 5
	[0048.105] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0048.105] lstrlenW (lpString=".ppt") returned 4
	[0048.105] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0048.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72
	[0048.105] lstrlenW (lpString=".zip") returned 4
	[0048.105] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0048.105] lstrlenW (lpString=".rar") returned 4
	[0048.105] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0048.105] lstrlenW (lpString=".bz2") returned 4
	[0048.105] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0048.105] lstrlenW (lpString=".7z") returned 3
	[0048.105] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0048.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72
	[0048.105] lstrlenW (lpString=".dbf") returned 4
	[0048.105] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0048.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72
	[0048.105] lstrlenW (lpString=".1cd") returned 4
	[0048.105] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0048.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF") returned 72
	[0048.105] lstrlenW (lpString=".jpg") returned 4
	[0048.105] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0048.106] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0048.106] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0048.106] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0048.332] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1347) returned 1
	[0048.332] CloseHandle (hObject=0x1d8) returned 1
	[0048.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif")) returned 0x20
	[0048.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.332] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0048.332] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.332] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.332] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0049.266] GetLastError () returned 0x0
	[0049.266] ReadFile (in: hFile=0x1d8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x543, lpOverlapped=0x0) returned 1
	[0049.271] WriteFile (in: hFile=0x200, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x550, lpOverlapped=0x0) returned 1
	[0049.272] ReadFile (in: hFile=0x1d8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.272] WriteFile (in: hFile=0x200, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0049.272] SetEndOfFile (hFile=0x200) returned 1
	[0049.272] CloseHandle (hObject=0x200) returned 1
	[0049.273] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.273] SetEndOfFile (hFile=0x1d8) returned 1
	[0049.273] CloseHandle (hObject=0x1d8) returned 1
	[0049.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0049.274] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif")) returned 1
	[0049.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75
	[0049.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75
	[0049.274] lstrlenW (lpString=".doc") returned 4
	[0049.274] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0049.274] lstrlenW (lpString=".docx") returned 5
	[0049.274] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0049.274] lstrlenW (lpString=".pdf") returned 4
	[0049.274] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0049.274] lstrlenW (lpString=".xls") returned 4
	[0049.274] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0049.274] lstrlenW (lpString=".xlsx") returned 5
	[0049.274] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0049.274] lstrlenW (lpString=".ppt") returned 4
	[0049.274] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0049.274] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75
	[0049.274] lstrlenW (lpString=".zip") returned 4
	[0049.274] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0049.274] lstrlenW (lpString=".rar") returned 4
	[0049.274] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0049.274] lstrlenW (lpString=".bz2") returned 4
	[0049.274] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0049.274] lstrlenW (lpString=".7z") returned 3
	[0049.275] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0049.275] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75
	[0049.275] lstrlenW (lpString=".dbf") returned 4
	[0049.275] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0049.275] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75
	[0049.275] lstrlenW (lpString=".1cd") returned 4
	[0049.275] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0049.275] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75
	[0049.275] lstrlenW (lpString=".jpg") returned 4
	[0049.275] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0049.275] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75
	[0049.275] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75
	[0049.275] lstrlenW (lpString=".doc") returned 4
	[0049.275] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0049.275] lstrlenW (lpString=".docx") returned 5
	[0049.275] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0049.275] lstrlenW (lpString=".pdf") returned 4
	[0049.275] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0049.275] lstrlenW (lpString=".xls") returned 4
	[0049.275] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0049.275] lstrlenW (lpString=".xlsx") returned 5
	[0049.275] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0049.275] lstrlenW (lpString=".ppt") returned 4
	[0049.275] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0049.275] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75
	[0049.275] lstrlenW (lpString=".zip") returned 4
	[0049.275] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0049.275] lstrlenW (lpString=".rar") returned 4
	[0049.275] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0049.275] lstrlenW (lpString=".bz2") returned 4
	[0049.275] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0049.276] lstrlenW (lpString=".7z") returned 3
	[0049.276] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0049.276] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75
	[0049.276] lstrlenW (lpString=".dbf") returned 4
	[0049.276] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0049.276] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75
	[0049.276] lstrlenW (lpString=".1cd") returned 4
	[0049.276] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0049.276] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF") returned 75
	[0049.276] lstrlenW (lpString=".jpg") returned 4
	[0049.276] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0049.276] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0049.276] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0049.276] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0049.477] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=18817) returned 1
	[0049.477] CloseHandle (hObject=0x218) returned 1
	[0049.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png")) returned 0x20
	[0049.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.478] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0049.478] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.478] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.478] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0049.478] GetLastError () returned 0x0
	[0049.478] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x4981, lpOverlapped=0x0) returned 1
	[0049.480] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x4990, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x4990, lpOverlapped=0x0) returned 1
	[0049.481] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.481] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0049.481] SetEndOfFile (hFile=0x1e0) returned 1
	[0049.481] CloseHandle (hObject=0x1e0) returned 1
	[0049.481] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.481] SetEndOfFile (hFile=0x218) returned 1
	[0049.482] CloseHandle (hObject=0x218) returned 1
	[0049.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0049.483] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png")) returned 1
	[0049.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72
	[0049.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72
	[0049.483] lstrlenW (lpString=".doc") returned 4
	[0049.483] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0049.483] lstrlenW (lpString=".docx") returned 5
	[0049.483] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0049.483] lstrlenW (lpString=".pdf") returned 4
	[0049.483] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0049.483] lstrlenW (lpString=".xls") returned 4
	[0049.483] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0049.483] lstrlenW (lpString=".xlsx") returned 5
	[0049.483] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0049.483] lstrlenW (lpString=".ppt") returned 4
	[0049.483] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0049.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72
	[0049.483] lstrlenW (lpString=".zip") returned 4
	[0049.483] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0049.483] lstrlenW (lpString=".rar") returned 4
	[0049.483] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0049.483] lstrlenW (lpString=".bz2") returned 4
	[0049.483] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0049.483] lstrlenW (lpString=".7z") returned 3
	[0049.483] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0049.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72
	[0049.484] lstrlenW (lpString=".dbf") returned 4
	[0049.484] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0049.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72
	[0049.484] lstrlenW (lpString=".1cd") returned 4
	[0049.484] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0049.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72
	[0049.484] lstrlenW (lpString=".jpg") returned 4
	[0049.484] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0049.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72
	[0049.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72
	[0049.484] lstrlenW (lpString=".doc") returned 4
	[0049.484] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0049.484] lstrlenW (lpString=".docx") returned 5
	[0049.484] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0049.484] lstrlenW (lpString=".pdf") returned 4
	[0049.484] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0049.484] lstrlenW (lpString=".xls") returned 4
	[0049.484] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0049.484] lstrlenW (lpString=".xlsx") returned 5
	[0049.484] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0049.484] lstrlenW (lpString=".ppt") returned 4
	[0049.484] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0049.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72
	[0049.484] lstrlenW (lpString=".zip") returned 4
	[0049.484] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0049.484] lstrlenW (lpString=".rar") returned 4
	[0049.484] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0049.484] lstrlenW (lpString=".bz2") returned 4
	[0049.484] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0049.484] lstrlenW (lpString=".7z") returned 3
	[0049.484] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0049.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72
	[0049.484] lstrlenW (lpString=".dbf") returned 4
	[0049.485] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0049.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72
	[0049.485] lstrlenW (lpString=".1cd") returned 4
	[0049.485] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0049.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG") returned 72
	[0049.485] lstrlenW (lpString=".jpg") returned 4
	[0049.485] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0049.485] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0049.485] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0049.485] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0049.485] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=2476) returned 1
	[0049.485] CloseHandle (hObject=0x218) returned 1
	[0049.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif")) returned 0x20
	[0049.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.485] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0049.486] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.486] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.486] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0049.948] GetLastError () returned 0x0
	[0049.948] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x9ac, lpOverlapped=0x0) returned 1
	[0049.949] WriteFile (in: hFile=0x1b8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x9b0, lpOverlapped=0x0) returned 1
	[0049.950] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.950] WriteFile (in: hFile=0x1b8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0049.950] SetEndOfFile (hFile=0x1b8) returned 1
	[0049.951] CloseHandle (hObject=0x1b8) returned 1
	[0049.951] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.951] SetEndOfFile (hFile=0x218) returned 1
	[0049.952] CloseHandle (hObject=0x218) returned 1
	[0049.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0049.952] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif")) returned 1
	[0049.952] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72
	[0049.952] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72
	[0049.952] lstrlenW (lpString=".doc") returned 4
	[0049.952] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0049.952] lstrlenW (lpString=".docx") returned 5
	[0049.952] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0049.952] lstrlenW (lpString=".pdf") returned 4
	[0049.952] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0049.952] lstrlenW (lpString=".xls") returned 4
	[0049.952] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0049.952] lstrlenW (lpString=".xlsx") returned 5
	[0049.952] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0049.952] lstrlenW (lpString=".ppt") returned 4
	[0049.952] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0049.952] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72
	[0049.952] lstrlenW (lpString=".zip") returned 4
	[0049.952] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0049.953] lstrlenW (lpString=".rar") returned 4
	[0049.953] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0049.953] lstrlenW (lpString=".bz2") returned 4
	[0049.953] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0049.953] lstrlenW (lpString=".7z") returned 3
	[0049.953] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0049.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72
	[0049.953] lstrlenW (lpString=".dbf") returned 4
	[0049.953] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0049.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72
	[0049.953] lstrlenW (lpString=".1cd") returned 4
	[0049.953] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0049.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72
	[0049.953] lstrlenW (lpString=".jpg") returned 4
	[0049.953] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0049.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72
	[0049.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72
	[0049.953] lstrlenW (lpString=".doc") returned 4
	[0049.953] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0049.953] lstrlenW (lpString=".docx") returned 5
	[0049.953] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0049.953] lstrlenW (lpString=".pdf") returned 4
	[0049.953] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0049.953] lstrlenW (lpString=".xls") returned 4
	[0049.953] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0049.953] lstrlenW (lpString=".xlsx") returned 5
	[0049.953] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0049.953] lstrlenW (lpString=".ppt") returned 4
	[0049.953] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0049.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72
	[0049.953] lstrlenW (lpString=".zip") returned 4
	[0049.954] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0049.954] lstrlenW (lpString=".rar") returned 4
	[0049.954] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0049.954] lstrlenW (lpString=".bz2") returned 4
	[0049.954] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0049.954] lstrlenW (lpString=".7z") returned 3
	[0049.954] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0049.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72
	[0049.954] lstrlenW (lpString=".dbf") returned 4
	[0049.954] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0049.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72
	[0049.954] lstrlenW (lpString=".1cd") returned 4
	[0049.954] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0049.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF") returned 72
	[0049.954] lstrlenW (lpString=".jpg") returned 4
	[0049.954] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0049.954] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0049.954] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0049.954] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0049.955] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1232) returned 1
	[0049.955] CloseHandle (hObject=0x218) returned 1
	[0049.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif")) returned 0x20
	[0049.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.955] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0049.955] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.955] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.955] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0050.398] GetLastError () returned 0x0
	[0050.398] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x4d0, lpOverlapped=0x0) returned 1
	[0050.402] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x4e0, lpOverlapped=0x0) returned 1
	[0050.403] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.403] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0050.403] SetEndOfFile (hFile=0x210) returned 1
	[0050.403] CloseHandle (hObject=0x210) returned 1
	[0050.404] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.404] SetEndOfFile (hFile=0x218) returned 1
	[0050.405] CloseHandle (hObject=0x218) returned 1
	[0050.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.405] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif")) returned 1
	[0050.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75
	[0050.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75
	[0050.405] lstrlenW (lpString=".doc") returned 4
	[0050.405] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.405] lstrlenW (lpString=".docx") returned 5
	[0050.405] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.405] lstrlenW (lpString=".pdf") returned 4
	[0050.405] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.405] lstrlenW (lpString=".xls") returned 4
	[0050.405] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.405] lstrlenW (lpString=".xlsx") returned 5
	[0050.405] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.405] lstrlenW (lpString=".ppt") returned 4
	[0050.405] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75
	[0050.405] lstrlenW (lpString=".zip") returned 4
	[0050.406] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.406] lstrlenW (lpString=".rar") returned 4
	[0050.406] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.406] lstrlenW (lpString=".bz2") returned 4
	[0050.406] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.406] lstrlenW (lpString=".7z") returned 3
	[0050.406] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75
	[0050.406] lstrlenW (lpString=".dbf") returned 4
	[0050.406] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75
	[0050.406] lstrlenW (lpString=".1cd") returned 4
	[0050.406] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75
	[0050.406] lstrlenW (lpString=".jpg") returned 4
	[0050.406] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75
	[0050.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75
	[0050.406] lstrlenW (lpString=".doc") returned 4
	[0050.406] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.406] lstrlenW (lpString=".docx") returned 5
	[0050.406] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.406] lstrlenW (lpString=".pdf") returned 4
	[0050.406] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.406] lstrlenW (lpString=".xls") returned 4
	[0050.406] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.406] lstrlenW (lpString=".xlsx") returned 5
	[0050.406] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.406] lstrlenW (lpString=".ppt") returned 4
	[0050.406] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75
	[0050.406] lstrlenW (lpString=".zip") returned 4
	[0050.407] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.407] lstrlenW (lpString=".rar") returned 4
	[0050.407] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.407] lstrlenW (lpString=".bz2") returned 4
	[0050.407] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.407] lstrlenW (lpString=".7z") returned 3
	[0050.407] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75
	[0050.407] lstrlenW (lpString=".dbf") returned 4
	[0050.407] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75
	[0050.407] lstrlenW (lpString=".1cd") returned 4
	[0050.407] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF") returned 75
	[0050.407] lstrlenW (lpString=".jpg") returned 4
	[0050.407] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.407] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0050.407] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0050.407] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0050.408] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1659) returned 1
	[0050.408] CloseHandle (hObject=0x218) returned 1
	[0050.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif")) returned 0x20
	[0050.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.408] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0050.408] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.408] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.408] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0050.419] GetLastError () returned 0x0
	[0050.419] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x67b, lpOverlapped=0x0) returned 1
	[0050.421] WriteFile (in: hFile=0x1f8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x680, lpOverlapped=0x0) returned 1
	[0050.422] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.422] WriteFile (in: hFile=0x1f8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0050.422] SetEndOfFile (hFile=0x1f8) returned 1
	[0050.422] CloseHandle (hObject=0x1f8) returned 1
	[0050.423] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.423] SetEndOfFile (hFile=0x218) returned 1
	[0050.423] CloseHandle (hObject=0x218) returned 1
	[0050.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.424] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif")) returned 1
	[0050.424] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74
	[0050.424] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74
	[0050.424] lstrlenW (lpString=".doc") returned 4
	[0050.424] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.424] lstrlenW (lpString=".docx") returned 5
	[0050.424] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.424] lstrlenW (lpString=".pdf") returned 4
	[0050.424] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.424] lstrlenW (lpString=".xls") returned 4
	[0050.424] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.424] lstrlenW (lpString=".xlsx") returned 5
	[0050.424] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.424] lstrlenW (lpString=".ppt") returned 4
	[0050.424] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.424] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74
	[0050.424] lstrlenW (lpString=".zip") returned 4
	[0050.424] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.424] lstrlenW (lpString=".rar") returned 4
	[0050.424] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.424] lstrlenW (lpString=".bz2") returned 4
	[0050.424] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.424] lstrlenW (lpString=".7z") returned 3
	[0050.425] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74
	[0050.425] lstrlenW (lpString=".dbf") returned 4
	[0050.425] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74
	[0050.425] lstrlenW (lpString=".1cd") returned 4
	[0050.425] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74
	[0050.425] lstrlenW (lpString=".jpg") returned 4
	[0050.425] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74
	[0050.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74
	[0050.425] lstrlenW (lpString=".doc") returned 4
	[0050.425] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.425] lstrlenW (lpString=".docx") returned 5
	[0050.425] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.425] lstrlenW (lpString=".pdf") returned 4
	[0050.425] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.425] lstrlenW (lpString=".xls") returned 4
	[0050.425] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.425] lstrlenW (lpString=".xlsx") returned 5
	[0050.425] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.425] lstrlenW (lpString=".ppt") returned 4
	[0050.425] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.425] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74
	[0050.425] lstrlenW (lpString=".zip") returned 4
	[0050.425] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.425] lstrlenW (lpString=".rar") returned 4
	[0050.425] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.425] lstrlenW (lpString=".bz2") returned 4
	[0050.425] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.425] lstrlenW (lpString=".7z") returned 3
	[0050.426] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.426] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74
	[0050.426] lstrlenW (lpString=".dbf") returned 4
	[0050.426] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.426] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74
	[0050.426] lstrlenW (lpString=".1cd") returned 4
	[0050.426] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.426] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF") returned 74
	[0050.426] lstrlenW (lpString=".jpg") returned 4
	[0050.426] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.426] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0050.426] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0050.426] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0050.426] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1379) returned 1
	[0050.426] CloseHandle (hObject=0x218) returned 1
	[0050.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif")) returned 0x20
	[0050.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.427] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0050.427] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.427] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.427] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0050.428] GetLastError () returned 0x0
	[0050.428] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x563, lpOverlapped=0x0) returned 1
	[0050.432] WriteFile (in: hFile=0x1f8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x570, lpOverlapped=0x0) returned 1
	[0050.433] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.433] WriteFile (in: hFile=0x1f8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0050.434] SetEndOfFile (hFile=0x1f8) returned 1
	[0050.436] CloseHandle (hObject=0x1f8) returned 1
	[0050.436] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.436] SetEndOfFile (hFile=0x218) returned 1
	[0050.437] CloseHandle (hObject=0x218) returned 1
	[0050.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.437] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif")) returned 1
	[0050.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73
	[0050.437] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73
	[0050.438] lstrlenW (lpString=".doc") returned 4
	[0050.438] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.438] lstrlenW (lpString=".docx") returned 5
	[0050.438] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.438] lstrlenW (lpString=".pdf") returned 4
	[0050.438] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.438] lstrlenW (lpString=".xls") returned 4
	[0050.438] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.438] lstrlenW (lpString=".xlsx") returned 5
	[0050.438] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.438] lstrlenW (lpString=".ppt") returned 4
	[0050.438] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73
	[0050.438] lstrlenW (lpString=".zip") returned 4
	[0050.438] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.438] lstrlenW (lpString=".rar") returned 4
	[0050.438] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.438] lstrlenW (lpString=".bz2") returned 4
	[0050.438] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.438] lstrlenW (lpString=".7z") returned 3
	[0050.438] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73
	[0050.438] lstrlenW (lpString=".dbf") returned 4
	[0050.438] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73
	[0050.438] lstrlenW (lpString=".1cd") returned 4
	[0050.438] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73
	[0050.438] lstrlenW (lpString=".jpg") returned 4
	[0050.438] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73
	[0050.438] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73
	[0050.439] lstrlenW (lpString=".doc") returned 4
	[0050.439] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0050.439] lstrlenW (lpString=".docx") returned 5
	[0050.439] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0050.439] lstrlenW (lpString=".pdf") returned 4
	[0050.439] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0050.439] lstrlenW (lpString=".xls") returned 4
	[0050.439] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0050.439] lstrlenW (lpString=".xlsx") returned 5
	[0050.439] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0050.439] lstrlenW (lpString=".ppt") returned 4
	[0050.439] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0050.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73
	[0050.439] lstrlenW (lpString=".zip") returned 4
	[0050.439] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0050.439] lstrlenW (lpString=".rar") returned 4
	[0050.439] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0050.439] lstrlenW (lpString=".bz2") returned 4
	[0050.439] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0050.439] lstrlenW (lpString=".7z") returned 3
	[0050.439] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0050.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73
	[0050.439] lstrlenW (lpString=".dbf") returned 4
	[0050.439] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0050.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73
	[0050.439] lstrlenW (lpString=".1cd") returned 4
	[0050.439] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0050.439] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF") returned 73
	[0050.439] lstrlenW (lpString=".jpg") returned 4
	[0050.439] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0050.440] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0050.440] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0050.440] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0050.440] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=48115) returned 1
	[0050.440] CloseHandle (hObject=0x218) returned 1
	[0050.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png")) returned 0x20
	[0050.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.440] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0050.440] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.440] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.440] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0050.441] GetLastError () returned 0x0
	[0050.441] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0xbbf3, lpOverlapped=0x0) returned 1
	[0050.662] WriteFile (in: hFile=0x1f8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xbc00, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xbc00, lpOverlapped=0x0) returned 1
	[0050.663] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.663] WriteFile (in: hFile=0x1f8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0050.663] SetEndOfFile (hFile=0x1f8) returned 1
	[0050.663] CloseHandle (hObject=0x1f8) returned 1
	[0050.664] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.664] SetEndOfFile (hFile=0x218) returned 1
	[0050.665] CloseHandle (hObject=0x218) returned 1
	[0050.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.665] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png")) returned 1
	[0050.665] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74
	[0050.665] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74
	[0050.665] lstrlenW (lpString=".doc") returned 4
	[0050.665] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.665] lstrlenW (lpString=".docx") returned 5
	[0050.665] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.665] lstrlenW (lpString=".pdf") returned 4
	[0050.665] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.665] lstrlenW (lpString=".xls") returned 4
	[0050.665] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.665] lstrlenW (lpString=".xlsx") returned 5
	[0050.665] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.665] lstrlenW (lpString=".ppt") returned 4
	[0050.665] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74
	[0050.666] lstrlenW (lpString=".zip") returned 4
	[0050.666] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.666] lstrlenW (lpString=".rar") returned 4
	[0050.666] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.666] lstrlenW (lpString=".bz2") returned 4
	[0050.666] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.666] lstrlenW (lpString=".7z") returned 3
	[0050.666] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74
	[0050.666] lstrlenW (lpString=".dbf") returned 4
	[0050.666] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74
	[0050.666] lstrlenW (lpString=".1cd") returned 4
	[0050.666] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74
	[0050.666] lstrlenW (lpString=".jpg") returned 4
	[0050.666] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74
	[0050.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74
	[0050.666] lstrlenW (lpString=".doc") returned 4
	[0050.666] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.666] lstrlenW (lpString=".docx") returned 5
	[0050.666] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.666] lstrlenW (lpString=".pdf") returned 4
	[0050.666] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.666] lstrlenW (lpString=".xls") returned 4
	[0050.666] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.666] lstrlenW (lpString=".xlsx") returned 5
	[0050.666] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.666] lstrlenW (lpString=".ppt") returned 4
	[0050.666] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74
	[0050.667] lstrlenW (lpString=".zip") returned 4
	[0050.667] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.667] lstrlenW (lpString=".rar") returned 4
	[0050.667] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.667] lstrlenW (lpString=".bz2") returned 4
	[0050.667] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.667] lstrlenW (lpString=".7z") returned 3
	[0050.667] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74
	[0050.667] lstrlenW (lpString=".dbf") returned 4
	[0050.667] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74
	[0050.667] lstrlenW (lpString=".1cd") returned 4
	[0050.667] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG") returned 74
	[0050.667] lstrlenW (lpString=".jpg") returned 4
	[0050.667] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.667] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0050.667] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0050.667] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0051.221] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=19563) returned 1
	[0051.221] CloseHandle (hObject=0x218) returned 1
	[0051.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png")) returned 0x20
	[0051.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.221] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0051.221] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.221] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.221] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0051.222] GetLastError () returned 0x0
	[0051.222] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x4c6b, lpOverlapped=0x0) returned 1
	[0051.405] WriteFile (in: hFile=0x20c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x4c70, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x4c70, lpOverlapped=0x0) returned 1
	[0051.406] ReadFile (in: hFile=0x218, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.406] WriteFile (in: hFile=0x20c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0051.407] SetEndOfFile (hFile=0x20c) returned 1
	[0051.407] CloseHandle (hObject=0x20c) returned 1
	[0051.407] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.407] SetEndOfFile (hFile=0x218) returned 1
	[0051.408] CloseHandle (hObject=0x218) returned 1
	[0051.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.408] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png")) returned 1
	[0051.408] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75
	[0051.408] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75
	[0051.408] lstrlenW (lpString=".doc") returned 4
	[0051.408] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.408] lstrlenW (lpString=".docx") returned 5
	[0051.408] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.409] lstrlenW (lpString=".pdf") returned 4
	[0051.409] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.409] lstrlenW (lpString=".xls") returned 4
	[0051.409] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.409] lstrlenW (lpString=".xlsx") returned 5
	[0051.409] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.409] lstrlenW (lpString=".ppt") returned 4
	[0051.409] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75
	[0051.409] lstrlenW (lpString=".zip") returned 4
	[0051.409] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.409] lstrlenW (lpString=".rar") returned 4
	[0051.409] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.409] lstrlenW (lpString=".bz2") returned 4
	[0051.409] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.409] lstrlenW (lpString=".7z") returned 3
	[0051.409] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75
	[0051.409] lstrlenW (lpString=".dbf") returned 4
	[0051.409] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75
	[0051.409] lstrlenW (lpString=".1cd") returned 4
	[0051.409] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75
	[0051.409] lstrlenW (lpString=".jpg") returned 4
	[0051.409] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75
	[0051.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75
	[0051.409] lstrlenW (lpString=".doc") returned 4
	[0051.410] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.410] lstrlenW (lpString=".docx") returned 5
	[0051.410] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.410] lstrlenW (lpString=".pdf") returned 4
	[0051.410] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.410] lstrlenW (lpString=".xls") returned 4
	[0051.410] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.410] lstrlenW (lpString=".xlsx") returned 5
	[0051.410] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.410] lstrlenW (lpString=".ppt") returned 4
	[0051.410] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75
	[0051.410] lstrlenW (lpString=".zip") returned 4
	[0051.410] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.410] lstrlenW (lpString=".rar") returned 4
	[0051.410] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.410] lstrlenW (lpString=".bz2") returned 4
	[0051.410] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.410] lstrlenW (lpString=".7z") returned 3
	[0051.410] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75
	[0051.410] lstrlenW (lpString=".dbf") returned 4
	[0051.410] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.411] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75
	[0051.411] lstrlenW (lpString=".1cd") returned 4
	[0051.411] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.411] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG") returned 75
	[0051.411] lstrlenW (lpString=".jpg") returned 4
	[0051.411] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.411] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0051.411] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0051.411] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.427] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=53115) returned 1
	[0051.427] CloseHandle (hObject=0x1e0) returned 1
	[0051.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png")) returned 0x20
	[0051.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.428] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.428] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.428] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.428] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0051.428] GetLastError () returned 0x0
	[0051.428] ReadFile (in: hFile=0x1e0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0xcf7b, lpOverlapped=0x0) returned 1
	[0051.443] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xcf80, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xcf80, lpOverlapped=0x0) returned 1
	[0051.445] ReadFile (in: hFile=0x1e0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.445] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0051.445] SetEndOfFile (hFile=0x210) returned 1
	[0051.445] CloseHandle (hObject=0x210) returned 1
	[0051.445] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.445] SetEndOfFile (hFile=0x1e0) returned 1
	[0051.446] CloseHandle (hObject=0x1e0) returned 1
	[0051.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.447] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png")) returned 1
	[0051.447] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77
	[0051.447] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77
	[0051.447] lstrlenW (lpString=".doc") returned 4
	[0051.447] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.447] lstrlenW (lpString=".docx") returned 5
	[0051.447] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.447] lstrlenW (lpString=".pdf") returned 4
	[0051.447] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.447] lstrlenW (lpString=".xls") returned 4
	[0051.447] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.447] lstrlenW (lpString=".xlsx") returned 5
	[0051.447] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.447] lstrlenW (lpString=".ppt") returned 4
	[0051.447] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.447] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77
	[0051.447] lstrlenW (lpString=".zip") returned 4
	[0051.447] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.447] lstrlenW (lpString=".rar") returned 4
	[0051.447] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.447] lstrlenW (lpString=".bz2") returned 4
	[0051.447] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.448] lstrlenW (lpString=".7z") returned 3
	[0051.448] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77
	[0051.448] lstrlenW (lpString=".dbf") returned 4
	[0051.448] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77
	[0051.448] lstrlenW (lpString=".1cd") returned 4
	[0051.448] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77
	[0051.448] lstrlenW (lpString=".jpg") returned 4
	[0051.448] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77
	[0051.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77
	[0051.448] lstrlenW (lpString=".doc") returned 4
	[0051.448] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.448] lstrlenW (lpString=".docx") returned 5
	[0051.448] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.448] lstrlenW (lpString=".pdf") returned 4
	[0051.448] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.448] lstrlenW (lpString=".xls") returned 4
	[0051.448] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.448] lstrlenW (lpString=".xlsx") returned 5
	[0051.448] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.448] lstrlenW (lpString=".ppt") returned 4
	[0051.448] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77
	[0051.448] lstrlenW (lpString=".zip") returned 4
	[0051.448] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.448] lstrlenW (lpString=".rar") returned 4
	[0051.448] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.448] lstrlenW (lpString=".bz2") returned 4
	[0051.449] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.449] lstrlenW (lpString=".7z") returned 3
	[0051.449] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.449] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77
	[0051.449] lstrlenW (lpString=".dbf") returned 4
	[0051.449] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.449] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77
	[0051.449] lstrlenW (lpString=".1cd") returned 4
	[0051.449] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.449] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG") returned 77
	[0051.449] lstrlenW (lpString=".jpg") returned 4
	[0051.449] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.449] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0051.449] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0051.449] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.450] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=2604) returned 1
	[0051.450] CloseHandle (hObject=0x1e0) returned 1
	[0051.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif")) returned 0x20
	[0051.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.450] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.450] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.450] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.450] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0051.504] GetLastError () returned 0x0
	[0051.504] ReadFile (in: hFile=0x1e0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0xa2c, lpOverlapped=0x0) returned 1
	[0051.506] WriteFile (in: hFile=0x1f8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xa30, lpOverlapped=0x0) returned 1
	[0051.507] ReadFile (in: hFile=0x1e0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.507] WriteFile (in: hFile=0x1f8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0051.508] SetEndOfFile (hFile=0x1f8) returned 1
	[0051.508] CloseHandle (hObject=0x1f8) returned 1
	[0051.508] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.508] SetEndOfFile (hFile=0x1e0) returned 1
	[0051.509] CloseHandle (hObject=0x1e0) returned 1
	[0051.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.509] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif")) returned 1
	[0051.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74
	[0051.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74
	[0051.509] lstrlenW (lpString=".doc") returned 4
	[0051.509] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.510] lstrlenW (lpString=".docx") returned 5
	[0051.510] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.510] lstrlenW (lpString=".pdf") returned 4
	[0051.510] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.510] lstrlenW (lpString=".xls") returned 4
	[0051.510] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.510] lstrlenW (lpString=".xlsx") returned 5
	[0051.510] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.510] lstrlenW (lpString=".ppt") returned 4
	[0051.510] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.510] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74
	[0051.510] lstrlenW (lpString=".zip") returned 4
	[0051.510] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.510] lstrlenW (lpString=".rar") returned 4
	[0051.510] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.510] lstrlenW (lpString=".bz2") returned 4
	[0051.510] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.510] lstrlenW (lpString=".7z") returned 3
	[0051.510] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.510] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74
	[0051.510] lstrlenW (lpString=".dbf") returned 4
	[0051.510] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.510] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74
	[0051.510] lstrlenW (lpString=".1cd") returned 4
	[0051.510] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.510] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74
	[0051.510] lstrlenW (lpString=".jpg") returned 4
	[0051.510] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.511] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74
	[0051.511] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74
	[0051.511] lstrlenW (lpString=".doc") returned 4
	[0051.511] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.511] lstrlenW (lpString=".docx") returned 5
	[0051.511] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.511] lstrlenW (lpString=".pdf") returned 4
	[0051.511] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.511] lstrlenW (lpString=".xls") returned 4
	[0051.511] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.511] lstrlenW (lpString=".xlsx") returned 5
	[0051.511] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.511] lstrlenW (lpString=".ppt") returned 4
	[0051.511] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.511] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74
	[0051.511] lstrlenW (lpString=".zip") returned 4
	[0051.511] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.511] lstrlenW (lpString=".rar") returned 4
	[0051.511] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.511] lstrlenW (lpString=".bz2") returned 4
	[0051.511] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.511] lstrlenW (lpString=".7z") returned 3
	[0051.511] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.511] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74
	[0051.511] lstrlenW (lpString=".dbf") returned 4
	[0051.511] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.511] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74
	[0051.511] lstrlenW (lpString=".1cd") returned 4
	[0051.511] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.512] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF") returned 74
	[0051.512] lstrlenW (lpString=".jpg") returned 4
	[0051.512] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.512] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0051.512] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0051.512] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.514] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=31975) returned 1
	[0051.514] CloseHandle (hObject=0x1e0) returned 1
	[0051.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png")) returned 0x20
	[0051.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.514] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.514] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.514] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.515] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0051.515] GetLastError () returned 0x0
	[0051.515] ReadFile (in: hFile=0x1e0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x7ce7, lpOverlapped=0x0) returned 1
	[0051.519] WriteFile (in: hFile=0x1f8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x7cf0, lpOverlapped=0x0) returned 1
	[0051.520] ReadFile (in: hFile=0x1e0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.520] WriteFile (in: hFile=0x1f8, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0051.520] SetEndOfFile (hFile=0x1f8) returned 1
	[0051.520] CloseHandle (hObject=0x1f8) returned 1
	[0051.520] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.520] SetEndOfFile (hFile=0x1e0) returned 1
	[0051.521] CloseHandle (hObject=0x1e0) returned 1
	[0051.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.522] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png")) returned 1
	[0051.522] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75
	[0051.522] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75
	[0051.522] lstrlenW (lpString=".doc") returned 4
	[0051.522] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.522] lstrlenW (lpString=".docx") returned 5
	[0051.522] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.522] lstrlenW (lpString=".pdf") returned 4
	[0051.522] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.522] lstrlenW (lpString=".xls") returned 4
	[0051.522] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.522] lstrlenW (lpString=".xlsx") returned 5
	[0051.522] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.522] lstrlenW (lpString=".ppt") returned 4
	[0051.522] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.522] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75
	[0051.522] lstrlenW (lpString=".zip") returned 4
	[0051.522] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.522] lstrlenW (lpString=".rar") returned 4
	[0051.522] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.522] lstrlenW (lpString=".bz2") returned 4
	[0051.522] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.522] lstrlenW (lpString=".7z") returned 3
	[0051.523] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.523] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75
	[0051.523] lstrlenW (lpString=".dbf") returned 4
	[0051.523] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.523] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75
	[0051.523] lstrlenW (lpString=".1cd") returned 4
	[0051.523] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.523] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75
	[0051.523] lstrlenW (lpString=".jpg") returned 4
	[0051.523] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.523] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75
	[0051.523] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75
	[0051.523] lstrlenW (lpString=".doc") returned 4
	[0051.523] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.523] lstrlenW (lpString=".docx") returned 5
	[0051.523] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.523] lstrlenW (lpString=".pdf") returned 4
	[0051.523] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.523] lstrlenW (lpString=".xls") returned 4
	[0051.523] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.523] lstrlenW (lpString=".xlsx") returned 5
	[0051.523] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.523] lstrlenW (lpString=".ppt") returned 4
	[0051.523] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.523] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75
	[0051.523] lstrlenW (lpString=".zip") returned 4
	[0051.523] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.523] lstrlenW (lpString=".rar") returned 4
	[0051.523] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.523] lstrlenW (lpString=".bz2") returned 4
	[0051.523] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.524] lstrlenW (lpString=".7z") returned 3
	[0051.524] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.524] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75
	[0051.524] lstrlenW (lpString=".dbf") returned 4
	[0051.524] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.524] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75
	[0051.524] lstrlenW (lpString=".1cd") returned 4
	[0051.524] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.524] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG") returned 75
	[0051.524] lstrlenW (lpString=".jpg") returned 4
	[0051.524] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.524] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0051.524] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0051.524] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0051.538] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=4100) returned 1
	[0051.539] CloseHandle (hObject=0x210) returned 1
	[0051.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif")) returned 0x20
	[0051.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.539] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0051.539] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.539] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.539] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.542] GetLastError () returned 0x0
	[0051.542] ReadFile (in: hFile=0x210, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x1004, lpOverlapped=0x0) returned 1
	[0051.544] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x1010, lpOverlapped=0x0) returned 1
	[0051.545] ReadFile (in: hFile=0x210, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.545] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0051.545] SetEndOfFile (hFile=0x1e0) returned 1
	[0051.545] CloseHandle (hObject=0x1e0) returned 1
	[0051.545] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.545] SetEndOfFile (hFile=0x210) returned 1
	[0051.546] CloseHandle (hObject=0x210) returned 1
	[0051.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.547] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif")) returned 1
	[0051.547] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75
	[0051.547] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75
	[0051.547] lstrlenW (lpString=".doc") returned 4
	[0051.547] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.547] lstrlenW (lpString=".docx") returned 5
	[0051.547] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.547] lstrlenW (lpString=".pdf") returned 4
	[0051.547] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.547] lstrlenW (lpString=".xls") returned 4
	[0051.547] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.547] lstrlenW (lpString=".xlsx") returned 5
	[0051.547] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.547] lstrlenW (lpString=".ppt") returned 4
	[0051.547] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.547] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75
	[0051.547] lstrlenW (lpString=".zip") returned 4
	[0051.547] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.547] lstrlenW (lpString=".rar") returned 4
	[0051.547] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.547] lstrlenW (lpString=".bz2") returned 4
	[0051.547] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.547] lstrlenW (lpString=".7z") returned 3
	[0051.547] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.547] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75
	[0051.547] lstrlenW (lpString=".dbf") returned 4
	[0051.548] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.548] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75
	[0051.548] lstrlenW (lpString=".1cd") returned 4
	[0051.548] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.548] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75
	[0051.548] lstrlenW (lpString=".jpg") returned 4
	[0051.548] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.548] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75
	[0051.548] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75
	[0051.548] lstrlenW (lpString=".doc") returned 4
	[0051.548] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.548] lstrlenW (lpString=".docx") returned 5
	[0051.548] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.548] lstrlenW (lpString=".pdf") returned 4
	[0051.548] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.548] lstrlenW (lpString=".xls") returned 4
	[0051.548] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.548] lstrlenW (lpString=".xlsx") returned 5
	[0051.548] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.548] lstrlenW (lpString=".ppt") returned 4
	[0051.548] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.548] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75
	[0051.548] lstrlenW (lpString=".zip") returned 4
	[0051.548] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.548] lstrlenW (lpString=".rar") returned 4
	[0051.548] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.548] lstrlenW (lpString=".bz2") returned 4
	[0051.548] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.548] lstrlenW (lpString=".7z") returned 3
	[0051.548] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.548] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75
	[0051.549] lstrlenW (lpString=".dbf") returned 4
	[0051.549] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75
	[0051.549] lstrlenW (lpString=".1cd") returned 4
	[0051.549] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF") returned 75
	[0051.549] lstrlenW (lpString=".jpg") returned 4
	[0051.549] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.549] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0051.549] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0051.549] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0051.549] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=47962) returned 1
	[0051.549] CloseHandle (hObject=0x210) returned 1
	[0051.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png")) returned 0x20
	[0051.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.550] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0051.550] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.550] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.550] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.550] GetLastError () returned 0x0
	[0051.550] ReadFile (in: hFile=0x210, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0xbb5a, lpOverlapped=0x0) returned 1
	[0051.788] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xbb60, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xbb60, lpOverlapped=0x0) returned 1
	[0051.789] ReadFile (in: hFile=0x210, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.789] WriteFile (in: hFile=0x1e0, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0051.790] SetEndOfFile (hFile=0x1e0) returned 1
	[0051.790] CloseHandle (hObject=0x1e0) returned 1
	[0051.790] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.790] SetEndOfFile (hFile=0x210) returned 1
	[0051.791] CloseHandle (hObject=0x210) returned 1
	[0051.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.791] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png")) returned 1
	[0051.791] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76
	[0051.791] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76
	[0051.791] lstrlenW (lpString=".doc") returned 4
	[0051.792] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.792] lstrlenW (lpString=".docx") returned 5
	[0051.792] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.792] lstrlenW (lpString=".pdf") returned 4
	[0051.792] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.792] lstrlenW (lpString=".xls") returned 4
	[0051.792] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.792] lstrlenW (lpString=".xlsx") returned 5
	[0051.792] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.792] lstrlenW (lpString=".ppt") returned 4
	[0051.792] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76
	[0051.792] lstrlenW (lpString=".zip") returned 4
	[0051.792] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.792] lstrlenW (lpString=".rar") returned 4
	[0051.792] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.792] lstrlenW (lpString=".bz2") returned 4
	[0051.792] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.792] lstrlenW (lpString=".7z") returned 3
	[0051.792] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76
	[0051.792] lstrlenW (lpString=".dbf") returned 4
	[0051.792] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76
	[0051.792] lstrlenW (lpString=".1cd") returned 4
	[0051.792] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76
	[0051.792] lstrlenW (lpString=".jpg") returned 4
	[0051.792] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76
	[0051.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76
	[0051.793] lstrlenW (lpString=".doc") returned 4
	[0051.793] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.793] lstrlenW (lpString=".docx") returned 5
	[0051.793] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.793] lstrlenW (lpString=".pdf") returned 4
	[0051.793] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.793] lstrlenW (lpString=".xls") returned 4
	[0051.793] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.793] lstrlenW (lpString=".xlsx") returned 5
	[0051.793] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.793] lstrlenW (lpString=".ppt") returned 4
	[0051.793] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76
	[0051.793] lstrlenW (lpString=".zip") returned 4
	[0051.793] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.793] lstrlenW (lpString=".rar") returned 4
	[0051.793] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.793] lstrlenW (lpString=".bz2") returned 4
	[0051.793] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.793] lstrlenW (lpString=".7z") returned 3
	[0051.793] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76
	[0051.793] lstrlenW (lpString=".dbf") returned 4
	[0051.793] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76
	[0051.793] lstrlenW (lpString=".1cd") returned 4
	[0051.793] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG") returned 76
	[0051.793] lstrlenW (lpString=".jpg") returned 4
	[0051.793] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.794] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0051.794] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0051.794] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.438] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=27177) returned 1
	[0052.438] CloseHandle (hObject=0x228) returned 1
	[0052.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png")) returned 0x20
	[0052.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.439] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.439] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.439] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.439] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0052.440] GetLastError () returned 0x0
	[0052.440] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x6a29, lpOverlapped=0x0) returned 1
	[0052.450] WriteFile (in: hFile=0x224, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x6a30, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x6a30, lpOverlapped=0x0) returned 1
	[0052.451] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.451] WriteFile (in: hFile=0x224, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0052.451] SetEndOfFile (hFile=0x224) returned 1
	[0052.451] CloseHandle (hObject=0x224) returned 1
	[0052.452] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.452] SetEndOfFile (hFile=0x228) returned 1
	[0052.453] CloseHandle (hObject=0x228) returned 1
	[0052.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.453] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png")) returned 1
	[0052.453] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74
	[0052.453] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74
	[0052.453] lstrlenW (lpString=".doc") returned 4
	[0052.453] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.453] lstrlenW (lpString=".docx") returned 5
	[0052.453] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.453] lstrlenW (lpString=".pdf") returned 4
	[0052.453] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.454] lstrlenW (lpString=".xls") returned 4
	[0052.454] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.454] lstrlenW (lpString=".xlsx") returned 5
	[0052.454] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.454] lstrlenW (lpString=".ppt") returned 4
	[0052.454] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.454] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74
	[0052.454] lstrlenW (lpString=".zip") returned 4
	[0052.454] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.454] lstrlenW (lpString=".rar") returned 4
	[0052.454] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.454] lstrlenW (lpString=".bz2") returned 4
	[0052.454] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.454] lstrlenW (lpString=".7z") returned 3
	[0052.454] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.454] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74
	[0052.454] lstrlenW (lpString=".dbf") returned 4
	[0052.454] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.454] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74
	[0052.454] lstrlenW (lpString=".1cd") returned 4
	[0052.454] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.454] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74
	[0052.454] lstrlenW (lpString=".jpg") returned 4
	[0052.454] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.454] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74
	[0052.454] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74
	[0052.454] lstrlenW (lpString=".doc") returned 4
	[0052.454] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.454] lstrlenW (lpString=".docx") returned 5
	[0052.454] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.454] lstrlenW (lpString=".pdf") returned 4
	[0052.454] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.454] lstrlenW (lpString=".xls") returned 4
	[0052.455] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.455] lstrlenW (lpString=".xlsx") returned 5
	[0052.455] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.455] lstrlenW (lpString=".ppt") returned 4
	[0052.455] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.455] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74
	[0052.455] lstrlenW (lpString=".zip") returned 4
	[0052.455] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.455] lstrlenW (lpString=".rar") returned 4
	[0052.455] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.455] lstrlenW (lpString=".bz2") returned 4
	[0052.455] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.455] lstrlenW (lpString=".7z") returned 3
	[0052.455] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.455] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74
	[0052.455] lstrlenW (lpString=".dbf") returned 4
	[0052.455] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.455] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74
	[0052.455] lstrlenW (lpString=".1cd") returned 4
	[0052.455] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.455] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG") returned 74
	[0052.455] lstrlenW (lpString=".jpg") returned 4
	[0052.455] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.456] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0052.456] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0052.456] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.456] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=1675) returned 1
	[0052.456] CloseHandle (hObject=0x228) returned 1
	[0052.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif")) returned 0x20
	[0052.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.456] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.456] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.456] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.456] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0052.458] GetLastError () returned 0x0
	[0052.458] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x68b, lpOverlapped=0x0) returned 1
	[0052.462] WriteFile (in: hFile=0x224, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x690, lpOverlapped=0x0) returned 1
	[0052.463] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.463] WriteFile (in: hFile=0x224, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0052.463] SetEndOfFile (hFile=0x224) returned 1
	[0052.464] CloseHandle (hObject=0x224) returned 1
	[0052.464] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.464] SetEndOfFile (hFile=0x228) returned 1
	[0052.465] CloseHandle (hObject=0x228) returned 1
	[0052.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.465] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif")) returned 1
	[0052.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74
	[0052.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74
	[0052.465] lstrlenW (lpString=".doc") returned 4
	[0052.465] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0052.465] lstrlenW (lpString=".docx") returned 5
	[0052.465] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0052.465] lstrlenW (lpString=".pdf") returned 4
	[0052.465] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0052.465] lstrlenW (lpString=".xls") returned 4
	[0052.465] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0052.465] lstrlenW (lpString=".xlsx") returned 5
	[0052.465] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0052.465] lstrlenW (lpString=".ppt") returned 4
	[0052.465] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0052.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74
	[0052.465] lstrlenW (lpString=".zip") returned 4
	[0052.465] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0052.466] lstrlenW (lpString=".rar") returned 4
	[0052.466] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0052.466] lstrlenW (lpString=".bz2") returned 4
	[0052.466] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0052.466] lstrlenW (lpString=".7z") returned 3
	[0052.466] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0052.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74
	[0052.466] lstrlenW (lpString=".dbf") returned 4
	[0052.466] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0052.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74
	[0052.466] lstrlenW (lpString=".1cd") returned 4
	[0052.466] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0052.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74
	[0052.466] lstrlenW (lpString=".jpg") returned 4
	[0052.466] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0052.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74
	[0052.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74
	[0052.466] lstrlenW (lpString=".doc") returned 4
	[0052.466] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0052.466] lstrlenW (lpString=".docx") returned 5
	[0052.466] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0052.466] lstrlenW (lpString=".pdf") returned 4
	[0052.466] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0052.466] lstrlenW (lpString=".xls") returned 4
	[0052.466] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0052.466] lstrlenW (lpString=".xlsx") returned 5
	[0052.466] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0052.466] lstrlenW (lpString=".ppt") returned 4
	[0052.466] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0052.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74
	[0052.466] lstrlenW (lpString=".zip") returned 4
	[0052.466] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0052.467] lstrlenW (lpString=".rar") returned 4
	[0052.467] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0052.467] lstrlenW (lpString=".bz2") returned 4
	[0052.467] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0052.467] lstrlenW (lpString=".7z") returned 3
	[0052.467] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0052.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74
	[0052.467] lstrlenW (lpString=".dbf") returned 4
	[0052.467] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0052.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74
	[0052.467] lstrlenW (lpString=".1cd") returned 4
	[0052.467] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0052.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF") returned 74
	[0052.467] lstrlenW (lpString=".jpg") returned 4
	[0052.467] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0052.467] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0052.467] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0052.467] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.467] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=18380) returned 1
	[0052.468] CloseHandle (hObject=0x228) returned 1
	[0052.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png")) returned 0x20
	[0052.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.468] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.468] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.468] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.468] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0052.468] GetLastError () returned 0x0
	[0052.468] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x47cc, lpOverlapped=0x0) returned 1
	[0052.471] WriteFile (in: hFile=0x224, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x47d0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x47d0, lpOverlapped=0x0) returned 1
	[0052.472] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.473] WriteFile (in: hFile=0x224, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0052.473] SetEndOfFile (hFile=0x224) returned 1
	[0052.473] CloseHandle (hObject=0x224) returned 1
	[0052.473] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.473] SetEndOfFile (hFile=0x228) returned 1
	[0052.474] CloseHandle (hObject=0x228) returned 1
	[0052.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.474] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png")) returned 1
	[0052.474] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75
	[0052.474] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75
	[0052.474] lstrlenW (lpString=".doc") returned 4
	[0052.474] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.474] lstrlenW (lpString=".docx") returned 5
	[0052.474] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.474] lstrlenW (lpString=".pdf") returned 4
	[0052.474] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.474] lstrlenW (lpString=".xls") returned 4
	[0052.475] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.475] lstrlenW (lpString=".xlsx") returned 5
	[0052.475] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.475] lstrlenW (lpString=".ppt") returned 4
	[0052.475] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75
	[0052.475] lstrlenW (lpString=".zip") returned 4
	[0052.475] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.475] lstrlenW (lpString=".rar") returned 4
	[0052.475] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.475] lstrlenW (lpString=".bz2") returned 4
	[0052.475] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.475] lstrlenW (lpString=".7z") returned 3
	[0052.475] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75
	[0052.475] lstrlenW (lpString=".dbf") returned 4
	[0052.475] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75
	[0052.475] lstrlenW (lpString=".1cd") returned 4
	[0052.475] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75
	[0052.475] lstrlenW (lpString=".jpg") returned 4
	[0052.475] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75
	[0052.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75
	[0052.477] lstrlenW (lpString=".doc") returned 4
	[0052.477] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.477] lstrlenW (lpString=".docx") returned 5
	[0052.477] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.477] lstrlenW (lpString=".pdf") returned 4
	[0052.477] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.477] lstrlenW (lpString=".xls") returned 4
	[0052.477] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.477] lstrlenW (lpString=".xlsx") returned 5
	[0052.477] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.478] lstrlenW (lpString=".ppt") returned 4
	[0052.478] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75
	[0052.480] lstrlenW (lpString=".zip") returned 4
	[0052.480] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.480] lstrlenW (lpString=".rar") returned 4
	[0052.480] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.483] lstrlenW (lpString=".bz2") returned 4
	[0052.483] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.483] lstrlenW (lpString=".7z") returned 3
	[0052.483] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75
	[0052.483] lstrlenW (lpString=".dbf") returned 4
	[0052.483] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75
	[0052.483] lstrlenW (lpString=".1cd") returned 4
	[0052.483] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG") returned 75
	[0052.483] lstrlenW (lpString=".jpg") returned 4
	[0052.483] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.483] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0052.483] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0052.483] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.484] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=4991) returned 1
	[0052.484] CloseHandle (hObject=0x228) returned 1
	[0052.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif")) returned 0x20
	[0052.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.484] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.484] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.484] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.484] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0052.486] GetLastError () returned 0x0
	[0052.486] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x137f, lpOverlapped=0x0) returned 1
	[0052.492] WriteFile (in: hFile=0x224, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x1380, lpOverlapped=0x0) returned 1
	[0052.493] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.493] WriteFile (in: hFile=0x224, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0052.493] SetEndOfFile (hFile=0x224) returned 1
	[0052.493] CloseHandle (hObject=0x224) returned 1
	[0052.493] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.493] SetEndOfFile (hFile=0x228) returned 1
	[0052.494] CloseHandle (hObject=0x228) returned 1
	[0052.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.494] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif")) returned 1
	[0052.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76
	[0052.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76
	[0052.495] lstrlenW (lpString=".doc") returned 4
	[0052.495] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0052.495] lstrlenW (lpString=".docx") returned 5
	[0052.495] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0052.495] lstrlenW (lpString=".pdf") returned 4
	[0052.495] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0052.495] lstrlenW (lpString=".xls") returned 4
	[0052.495] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0052.495] lstrlenW (lpString=".xlsx") returned 5
	[0052.495] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0052.495] lstrlenW (lpString=".ppt") returned 4
	[0052.495] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0052.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76
	[0052.495] lstrlenW (lpString=".zip") returned 4
	[0052.495] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0052.495] lstrlenW (lpString=".rar") returned 4
	[0052.495] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0052.495] lstrlenW (lpString=".bz2") returned 4
	[0052.495] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0052.495] lstrlenW (lpString=".7z") returned 3
	[0052.495] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0052.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76
	[0052.495] lstrlenW (lpString=".dbf") returned 4
	[0052.495] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0052.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76
	[0052.495] lstrlenW (lpString=".1cd") returned 4
	[0052.495] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0052.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76
	[0052.495] lstrlenW (lpString=".jpg") returned 4
	[0052.495] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0052.496] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76
	[0052.496] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76
	[0052.496] lstrlenW (lpString=".doc") returned 4
	[0052.496] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0052.496] lstrlenW (lpString=".docx") returned 5
	[0052.496] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0052.496] lstrlenW (lpString=".pdf") returned 4
	[0052.496] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0052.496] lstrlenW (lpString=".xls") returned 4
	[0052.496] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0052.496] lstrlenW (lpString=".xlsx") returned 5
	[0052.496] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0052.496] lstrlenW (lpString=".ppt") returned 4
	[0052.496] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0052.496] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76
	[0052.496] lstrlenW (lpString=".zip") returned 4
	[0052.496] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0052.496] lstrlenW (lpString=".rar") returned 4
	[0052.496] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0052.496] lstrlenW (lpString=".bz2") returned 4
	[0052.496] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0052.496] lstrlenW (lpString=".7z") returned 3
	[0052.496] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0052.496] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76
	[0052.496] lstrlenW (lpString=".dbf") returned 4
	[0052.496] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0052.496] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76
	[0052.496] lstrlenW (lpString=".1cd") returned 4
	[0052.496] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0052.496] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF") returned 76
	[0052.496] lstrlenW (lpString=".jpg") returned 4
	[0052.496] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0052.497] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0052.497] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0052.497] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.497] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=44302) returned 1
	[0052.497] CloseHandle (hObject=0x228) returned 1
	[0052.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png")) returned 0x20
	[0052.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.497] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.497] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.497] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.497] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0052.498] GetLastError () returned 0x0
	[0052.498] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0xad0e, lpOverlapped=0x0) returned 1
	[0052.635] WriteFile (in: hFile=0x224, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xad10, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xad10, lpOverlapped=0x0) returned 1
	[0052.637] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.637] WriteFile (in: hFile=0x224, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0052.637] SetEndOfFile (hFile=0x224) returned 1
	[0052.637] CloseHandle (hObject=0x224) returned 1
	[0052.637] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.637] SetEndOfFile (hFile=0x228) returned 1
	[0052.649] CloseHandle (hObject=0x228) returned 1
	[0052.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.661] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png")) returned 1
	[0052.662] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77
	[0052.662] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77
	[0052.662] lstrlenW (lpString=".doc") returned 4
	[0052.662] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.662] lstrlenW (lpString=".docx") returned 5
	[0052.662] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.662] lstrlenW (lpString=".pdf") returned 4
	[0052.662] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.662] lstrlenW (lpString=".xls") returned 4
	[0052.662] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.662] lstrlenW (lpString=".xlsx") returned 5
	[0052.662] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.662] lstrlenW (lpString=".ppt") returned 4
	[0052.662] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.662] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77
	[0052.662] lstrlenW (lpString=".zip") returned 4
	[0052.662] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.662] lstrlenW (lpString=".rar") returned 4
	[0052.662] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.662] lstrlenW (lpString=".bz2") returned 4
	[0052.662] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.662] lstrlenW (lpString=".7z") returned 3
	[0052.662] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.662] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77
	[0052.663] lstrlenW (lpString=".dbf") returned 4
	[0052.663] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.663] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77
	[0052.663] lstrlenW (lpString=".1cd") returned 4
	[0052.663] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.663] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77
	[0052.663] lstrlenW (lpString=".jpg") returned 4
	[0052.663] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.663] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77
	[0052.663] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77
	[0052.663] lstrlenW (lpString=".doc") returned 4
	[0052.663] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.663] lstrlenW (lpString=".docx") returned 5
	[0052.663] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.663] lstrlenW (lpString=".pdf") returned 4
	[0052.663] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.663] lstrlenW (lpString=".xls") returned 4
	[0052.663] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.663] lstrlenW (lpString=".xlsx") returned 5
	[0052.663] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.663] lstrlenW (lpString=".ppt") returned 4
	[0052.663] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.663] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77
	[0052.663] lstrlenW (lpString=".zip") returned 4
	[0052.663] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.663] lstrlenW (lpString=".rar") returned 4
	[0052.663] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.663] lstrlenW (lpString=".bz2") returned 4
	[0052.663] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.663] lstrlenW (lpString=".7z") returned 3
	[0052.664] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.664] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77
	[0052.664] lstrlenW (lpString=".dbf") returned 4
	[0052.664] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.664] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77
	[0052.664] lstrlenW (lpString=".1cd") returned 4
	[0052.664] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.664] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG") returned 77
	[0052.664] lstrlenW (lpString=".jpg") returned 4
	[0052.664] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.664] lstrcmpiW (lpString1=".CHM", lpString2=".beets") returned 1
	[0052.664] lstrlenW (lpString="FM20.CHM") returned 8
	[0052.664] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.665] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=334427) returned 1
	[0052.665] CloseHandle (hObject=0x228) returned 1
	[0052.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm")) returned 0x20
	[0052.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.673] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.673] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.673] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.673] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0052.673] GetLastError () returned 0x0
	[0052.674] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x51a5b, lpOverlapped=0x0) returned 1
	[0052.740] WriteFile (in: hFile=0x194, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x51a60, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x51a60, lpOverlapped=0x0) returned 1
	[0052.747] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.747] WriteFile (in: hFile=0x194, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe4, lpOverlapped=0x0) returned 1
	[0052.747] SetEndOfFile (hFile=0x194) returned 1
	[0052.747] CloseHandle (hObject=0x194) returned 1
	[0052.747] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.747] SetEndOfFile (hFile=0x228) returned 1
	[0052.751] CloseHandle (hObject=0x228) returned 1
	[0052.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.751] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm")) returned 1
	[0052.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69
	[0052.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69
	[0052.751] lstrlenW (lpString=".doc") returned 4
	[0052.751] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0052.751] lstrlenW (lpString=".docx") returned 5
	[0052.751] lstrcmpiW (lpString1=".docx", lpString2="0.CHM") returned -1
	[0052.752] lstrlenW (lpString=".pdf") returned 4
	[0052.752] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0052.752] lstrlenW (lpString=".xls") returned 4
	[0052.752] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0052.752] lstrlenW (lpString=".xlsx") returned 5
	[0052.752] lstrcmpiW (lpString1=".xlsx", lpString2="0.CHM") returned -1
	[0052.752] lstrlenW (lpString=".ppt") returned 4
	[0052.752] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0052.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69
	[0052.752] lstrlenW (lpString=".zip") returned 4
	[0052.752] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0052.752] lstrlenW (lpString=".rar") returned 4
	[0052.752] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0052.752] lstrlenW (lpString=".bz2") returned 4
	[0052.752] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0052.752] lstrlenW (lpString=".7z") returned 3
	[0052.752] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0052.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69
	[0052.752] lstrlenW (lpString=".dbf") returned 4
	[0052.752] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0052.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69
	[0052.752] lstrlenW (lpString=".1cd") returned 4
	[0052.752] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0052.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69
	[0052.752] lstrlenW (lpString=".jpg") returned 4
	[0052.752] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0052.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69
	[0052.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69
	[0052.752] lstrlenW (lpString=".doc") returned 4
	[0052.752] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0052.752] lstrlenW (lpString=".docx") returned 5
	[0052.752] lstrcmpiW (lpString1=".docx", lpString2="0.CHM") returned -1
	[0052.753] lstrlenW (lpString=".pdf") returned 4
	[0052.753] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0052.753] lstrlenW (lpString=".xls") returned 4
	[0052.753] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0052.753] lstrlenW (lpString=".xlsx") returned 5
	[0052.753] lstrcmpiW (lpString1=".xlsx", lpString2="0.CHM") returned -1
	[0052.753] lstrlenW (lpString=".ppt") returned 4
	[0052.753] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0052.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69
	[0052.753] lstrlenW (lpString=".zip") returned 4
	[0052.753] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0052.753] lstrlenW (lpString=".rar") returned 4
	[0052.753] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0052.753] lstrlenW (lpString=".bz2") returned 4
	[0052.753] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0052.753] lstrlenW (lpString=".7z") returned 3
	[0052.753] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0052.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69
	[0052.753] lstrlenW (lpString=".dbf") returned 4
	[0052.753] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0052.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69
	[0052.753] lstrlenW (lpString=".1cd") returned 4
	[0052.753] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0052.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM") returned 69
	[0052.753] lstrlenW (lpString=".jpg") returned 4
	[0052.753] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0052.753] lstrcmpiW (lpString1=".CHM", lpString2=".beets") returned 1
	[0052.753] lstrlenW (lpString="VBOB6.CHM") returned 9
	[0052.753] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.754] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=123956) returned 1
	[0052.754] CloseHandle (hObject=0x228) returned 1
	[0052.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm")) returned 0x20
	[0052.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.754] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.754] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.754] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.754] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0052.755] GetLastError () returned 0x0
	[0052.755] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x1e434, lpOverlapped=0x0) returned 1
	[0052.759] WriteFile (in: hFile=0x194, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x1e440, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x1e440, lpOverlapped=0x0) returned 1
	[0052.762] ReadFile (in: hFile=0x228, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.762] WriteFile (in: hFile=0x194, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0052.762] SetEndOfFile (hFile=0x194) returned 1
	[0052.762] CloseHandle (hObject=0x194) returned 1
	[0052.762] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.762] SetEndOfFile (hFile=0x228) returned 1
	[0052.764] CloseHandle (hObject=0x228) returned 1
	[0052.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.764] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm")) returned 1
	[0052.764] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70
	[0052.764] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70
	[0052.764] lstrlenW (lpString=".doc") returned 4
	[0052.764] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0052.765] lstrlenW (lpString=".docx") returned 5
	[0052.765] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1
	[0052.765] lstrlenW (lpString=".pdf") returned 4
	[0052.765] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0052.765] lstrlenW (lpString=".xls") returned 4
	[0052.765] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0052.765] lstrlenW (lpString=".xlsx") returned 5
	[0052.765] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1
	[0052.765] lstrlenW (lpString=".ppt") returned 4
	[0052.765] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0052.765] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70
	[0052.765] lstrlenW (lpString=".zip") returned 4
	[0052.765] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0052.765] lstrlenW (lpString=".rar") returned 4
	[0052.765] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0052.765] lstrlenW (lpString=".bz2") returned 4
	[0052.765] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0052.765] lstrlenW (lpString=".7z") returned 3
	[0052.765] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0052.765] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70
	[0052.765] lstrlenW (lpString=".dbf") returned 4
	[0052.765] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0052.765] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70
	[0052.765] lstrlenW (lpString=".1cd") returned 4
	[0052.765] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0052.765] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70
	[0052.765] lstrlenW (lpString=".jpg") returned 4
	[0052.765] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0052.765] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70
	[0052.765] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70
	[0052.765] lstrlenW (lpString=".doc") returned 4
	[0052.765] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0052.766] lstrlenW (lpString=".docx") returned 5
	[0052.766] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1
	[0052.766] lstrlenW (lpString=".pdf") returned 4
	[0052.766] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0052.766] lstrlenW (lpString=".xls") returned 4
	[0052.766] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0052.766] lstrlenW (lpString=".xlsx") returned 5
	[0052.766] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1
	[0052.766] lstrlenW (lpString=".ppt") returned 4
	[0052.766] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0052.766] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70
	[0052.766] lstrlenW (lpString=".zip") returned 4
	[0052.766] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0052.766] lstrlenW (lpString=".rar") returned 4
	[0052.766] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0052.766] lstrlenW (lpString=".bz2") returned 4
	[0052.766] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0052.766] lstrlenW (lpString=".7z") returned 3
	[0052.766] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0052.766] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70
	[0052.766] lstrlenW (lpString=".dbf") returned 4
	[0052.766] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0052.766] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70
	[0052.766] lstrlenW (lpString=".1cd") returned 4
	[0052.766] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0052.766] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM") returned 70
	[0052.766] lstrlenW (lpString=".jpg") returned 4
	[0052.766] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0052.766] lstrcmpiW (lpString1=".CHM", lpString2=".beets") returned 1
	[0052.767] lstrlenW (lpString="VBUI6.CHM") returned 9
	[0052.767] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0052.829] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=416918) returned 1
	[0052.830] CloseHandle (hObject=0x1e0) returned 1
	[0052.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm")) returned 0x20
	[0052.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.830] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0052.830] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.830] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.830] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0052.830] GetLastError () returned 0x0
	[0052.830] ReadFile (in: hFile=0x1e0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x65c96, lpOverlapped=0x0) returned 1
	[0053.321] WriteFile (in: hFile=0x228, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x65ca0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x65ca0, lpOverlapped=0x0) returned 1
	[0053.329] ReadFile (in: hFile=0x1e0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0053.329] WriteFile (in: hFile=0x228, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0053.330] SetEndOfFile (hFile=0x228) returned 1
	[0053.330] CloseHandle (hObject=0x228) returned 1
	[0053.330] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.330] SetEndOfFile (hFile=0x1e0) returned 1
	[0053.334] CloseHandle (hObject=0x1e0) returned 1
	[0053.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0053.334] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm")) returned 1
	[0053.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70
	[0053.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70
	[0053.334] lstrlenW (lpString=".doc") returned 4
	[0053.334] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0053.334] lstrlenW (lpString=".docx") returned 5
	[0053.334] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1
	[0053.334] lstrlenW (lpString=".pdf") returned 4
	[0053.335] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0053.335] lstrlenW (lpString=".xls") returned 4
	[0053.335] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0053.335] lstrlenW (lpString=".xlsx") returned 5
	[0053.335] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1
	[0053.335] lstrlenW (lpString=".ppt") returned 4
	[0053.335] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0053.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70
	[0053.335] lstrlenW (lpString=".zip") returned 4
	[0053.335] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0053.335] lstrlenW (lpString=".rar") returned 4
	[0053.335] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0053.335] lstrlenW (lpString=".bz2") returned 4
	[0053.335] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0053.335] lstrlenW (lpString=".7z") returned 3
	[0053.335] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0053.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70
	[0053.335] lstrlenW (lpString=".dbf") returned 4
	[0053.335] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0053.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70
	[0053.335] lstrlenW (lpString=".1cd") returned 4
	[0053.335] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0053.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70
	[0053.335] lstrlenW (lpString=".jpg") returned 4
	[0053.335] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0053.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70
	[0053.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70
	[0053.335] lstrlenW (lpString=".doc") returned 4
	[0053.335] lstrcmpiW (lpString1=".doc", lpString2=".CHM") returned 1
	[0053.335] lstrlenW (lpString=".docx") returned 5
	[0053.335] lstrcmpiW (lpString1=".docx", lpString2="6.CHM") returned -1
	[0053.336] lstrlenW (lpString=".pdf") returned 4
	[0053.336] lstrcmpiW (lpString1=".pdf", lpString2=".CHM") returned 1
	[0053.336] lstrlenW (lpString=".xls") returned 4
	[0053.336] lstrcmpiW (lpString1=".xls", lpString2=".CHM") returned 1
	[0053.336] lstrlenW (lpString=".xlsx") returned 5
	[0053.336] lstrcmpiW (lpString1=".xlsx", lpString2="6.CHM") returned -1
	[0053.336] lstrlenW (lpString=".ppt") returned 4
	[0053.336] lstrcmpiW (lpString1=".ppt", lpString2=".CHM") returned 1
	[0053.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70
	[0053.336] lstrlenW (lpString=".zip") returned 4
	[0053.336] lstrcmpiW (lpString1=".zip", lpString2=".CHM") returned 1
	[0053.336] lstrlenW (lpString=".rar") returned 4
	[0053.336] lstrcmpiW (lpString1=".rar", lpString2=".CHM") returned 1
	[0053.336] lstrlenW (lpString=".bz2") returned 4
	[0053.336] lstrcmpiW (lpString1=".bz2", lpString2=".CHM") returned -1
	[0053.336] lstrlenW (lpString=".7z") returned 3
	[0053.336] lstrcmpiW (lpString1=".7z", lpString2="CHM") returned -1
	[0053.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70
	[0053.336] lstrlenW (lpString=".dbf") returned 4
	[0053.336] lstrcmpiW (lpString1=".dbf", lpString2=".CHM") returned 1
	[0053.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70
	[0053.336] lstrlenW (lpString=".1cd") returned 4
	[0053.336] lstrcmpiW (lpString1=".1cd", lpString2=".CHM") returned -1
	[0053.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM") returned 70
	[0053.336] lstrlenW (lpString=".jpg") returned 4
	[0053.336] lstrcmpiW (lpString1=".jpg", lpString2=".CHM") returned 1
	[0054.464] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0054.464] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv") returned 70
	[0054.464] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv") returned 70
	[0054.464] lstrlenW (lpString=".doc") returned 4
	[0054.464] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1
	[0054.464] lstrlenW (lpString=".docx") returned 5
	[0054.464] lstrcmpiW (lpString1=".docx", lpString2="e.wmv") returned -1
	[0054.464] lstrlenW (lpString=".pdf") returned 4
	[0054.464] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1
	[0054.464] lstrlenW (lpString=".xls") returned 4
	[0054.464] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1
	[0054.464] lstrlenW (lpString=".xlsx") returned 5
	[0054.465] lstrcmpiW (lpString1=".xlsx", lpString2="e.wmv") returned -1
	[0054.465] lstrlenW (lpString=".ppt") returned 4
	[0054.465] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1
	[0054.465] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv") returned 70
	[0054.465] lstrlenW (lpString=".zip") returned 4
	[0054.465] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1
	[0054.465] lstrlenW (lpString=".rar") returned 4
	[0054.465] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1
	[0054.465] lstrlenW (lpString=".bz2") returned 4
	[0054.465] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1
	[0054.465] lstrlenW (lpString=".7z") returned 3
	[0054.465] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1
	[0054.465] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv") returned 70
	[0054.465] lstrlenW (lpString=".dbf") returned 4
	[0054.465] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1
	[0054.465] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv") returned 70
	[0054.465] lstrlenW (lpString=".1cd") returned 4
	[0054.465] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1
	[0054.465] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv") returned 70
	[0054.465] lstrlenW (lpString=".jpg") returned 4
	[0054.465] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1
	[0054.467] MoveFileW (lpExistingFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv"), lpNewFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0054.467] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv") returned 74
	[0054.467] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv") returned 74
	[0054.467] lstrlenW (lpString=".doc") returned 4
	[0054.467] lstrcmpiW (lpString1=".doc", lpString2=".wmv") returned -1
	[0054.467] lstrlenW (lpString=".docx") returned 5
	[0054.467] lstrcmpiW (lpString1=".docx", lpString2="L.wmv") returned -1
	[0054.467] lstrlenW (lpString=".pdf") returned 4
	[0054.467] lstrcmpiW (lpString1=".pdf", lpString2=".wmv") returned -1
	[0054.468] lstrlenW (lpString=".xls") returned 4
	[0054.468] lstrcmpiW (lpString1=".xls", lpString2=".wmv") returned 1
	[0054.468] lstrlenW (lpString=".xlsx") returned 5
	[0054.468] lstrcmpiW (lpString1=".xlsx", lpString2="L.wmv") returned -1
	[0054.468] lstrlenW (lpString=".ppt") returned 4
	[0054.468] lstrcmpiW (lpString1=".ppt", lpString2=".wmv") returned -1
	[0054.468] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv") returned 74
	[0054.468] lstrlenW (lpString=".zip") returned 4
	[0054.468] lstrcmpiW (lpString1=".zip", lpString2=".wmv") returned 1
	[0054.468] lstrlenW (lpString=".rar") returned 4
	[0054.468] lstrcmpiW (lpString1=".rar", lpString2=".wmv") returned -1
	[0054.468] lstrlenW (lpString=".bz2") returned 4
	[0054.468] lstrcmpiW (lpString1=".bz2", lpString2=".wmv") returned -1
	[0054.468] lstrlenW (lpString=".7z") returned 3
	[0054.468] lstrcmpiW (lpString1=".7z", lpString2="wmv") returned -1
	[0054.468] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv") returned 74
	[0054.468] lstrlenW (lpString=".dbf") returned 4
	[0054.468] lstrcmpiW (lpString1=".dbf", lpString2=".wmv") returned -1
	[0054.468] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv") returned 74
	[0054.468] lstrlenW (lpString=".1cd") returned 4
	[0054.468] lstrcmpiW (lpString1=".1cd", lpString2=".wmv") returned -1
	[0054.468] lstrlenW (lpString="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv") returned 74
	[0054.468] lstrlenW (lpString=".jpg") returned 4
	[0054.468] lstrcmpiW (lpString1=".jpg", lpString2=".wmv") returned -1
	[0057.193] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.193] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0057.195] GetLastError () returned 0x0
	[0057.195] ReadFile (in: hFile=0x1a0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x78e4, lpOverlapped=0x0) returned 1
	[0057.200] WriteFile (in: hFile=0x228, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x78f0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x78f0, lpOverlapped=0x0) returned 1
	[0057.203] ReadFile (in: hFile=0x1a0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.203] WriteFile (in: hFile=0x228, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.203] SetEndOfFile (hFile=0x228) returned 1
	[0057.204] CloseHandle (hObject=0x228) returned 1
	[0057.204] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.204] SetEndOfFile (hFile=0x1a0) returned 1
	[0057.205] CloseHandle (hObject=0x1a0) returned 1
	[0057.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.205] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 1
	[0057.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80
	[0057.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80
	[0057.205] lstrlenW (lpString=".doc") returned 4
	[0057.205] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1
	[0057.205] lstrlenW (lpString=".docx") returned 5
	[0057.205] lstrcmpiW (lpString1=".docx", lpString2="x.xsl") returned -1
	[0057.205] lstrlenW (lpString=".pdf") returned 4
	[0057.205] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1
	[0057.205] lstrlenW (lpString=".xls") returned 4
	[0057.205] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1
	[0057.206] lstrlenW (lpString=".xlsx") returned 5
	[0057.206] lstrcmpiW (lpString1=".xlsx", lpString2="x.xsl") returned -1
	[0057.206] lstrlenW (lpString=".ppt") returned 4
	[0057.206] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1
	[0057.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80
	[0057.206] lstrlenW (lpString=".zip") returned 4
	[0057.206] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1
	[0057.206] lstrlenW (lpString=".rar") returned 4
	[0057.206] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1
	[0057.206] lstrlenW (lpString=".bz2") returned 4
	[0057.206] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1
	[0057.206] lstrlenW (lpString=".7z") returned 3
	[0057.206] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1
	[0057.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80
	[0057.206] lstrlenW (lpString=".dbf") returned 4
	[0057.206] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1
	[0057.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80
	[0057.206] lstrlenW (lpString=".1cd") returned 4
	[0057.206] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1
	[0057.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned 80
	[0057.206] lstrlenW (lpString=".jpg") returned 4
	[0057.206] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1
	[0057.207] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.207] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0057.208] GetLastError () returned 0x0
	[0057.208] ReadFile (in: hFile=0x1a0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x851c, lpOverlapped=0x0) returned 1
	[0057.209] WriteFile (in: hFile=0x228, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x8520, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x8520, lpOverlapped=0x0) returned 1
	[0057.211] ReadFile (in: hFile=0x1a0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.211] WriteFile (in: hFile=0x228, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0057.211] SetEndOfFile (hFile=0x228) returned 1
	[0057.211] CloseHandle (hObject=0x228) returned 1
	[0057.211] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.211] SetEndOfFile (hFile=0x1a0) returned 1
	[0057.212] CloseHandle (hObject=0x1a0) returned 1
	[0057.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.212] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 1
	[0057.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned 79
	[0057.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned 79
	[0057.213] lstrlenW (lpString=".doc") returned 4
	[0057.213] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1
	[0057.213] lstrlenW (lpString=".docx") returned 5
	[0057.213] lstrcmpiW (lpString1=".docx", lpString2="0.xsl") returned -1
	[0057.213] lstrlenW (lpString=".pdf") returned 4
	[0057.213] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1
	[0057.213] lstrlenW (lpString=".xls") returned 4
	[0057.213] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1
	[0057.213] lstrlenW (lpString=".xlsx") returned 5
	[0057.213] lstrcmpiW (lpString1=".xlsx", lpString2="0.xsl") returned -1
	[0057.213] lstrlenW (lpString=".ppt") returned 4
	[0057.213] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1
	[0057.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned 79
	[0057.213] lstrlenW (lpString=".zip") returned 4
	[0057.213] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1
	[0057.213] lstrlenW (lpString=".rar") returned 4
	[0057.213] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1
	[0057.213] lstrlenW (lpString=".bz2") returned 4
	[0057.213] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1
	[0057.213] lstrlenW (lpString=".7z") returned 3
	[0057.213] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1
	[0057.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned 79
	[0057.214] lstrlenW (lpString=".dbf") returned 4
	[0057.214] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1
	[0057.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned 79
	[0057.214] lstrlenW (lpString=".1cd") returned 4
	[0057.214] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1
	[0057.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned 79
	[0057.214] lstrlenW (lpString=".jpg") returned 4
	[0057.214] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1
	[0057.215] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=32146) returned 1
	[0057.215] CloseHandle (hObject=0x1a0) returned 1
	[0057.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 0x20
	[0057.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0057.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0057.215] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.215] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0057.216] GetLastError () returned 0x0
	[0057.216] ReadFile (in: hFile=0x1a0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x7d92, lpOverlapped=0x0) returned 1
	[0057.217] WriteFile (in: hFile=0x228, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x7da0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x7da0, lpOverlapped=0x0) returned 1
	[0057.219] ReadFile (in: hFile=0x1a0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.219] WriteFile (in: hFile=0x228, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0057.219] SetEndOfFile (hFile=0x228) returned 1
	[0057.219] CloseHandle (hObject=0x228) returned 1
	[0057.219] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.219] SetEndOfFile (hFile=0x1a0) returned 1
	[0057.220] CloseHandle (hObject=0x1a0) returned 1
	[0057.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.220] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 1
	[0057.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned 77
	[0057.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned 77
	[0057.221] lstrlenW (lpString=".doc") returned 4
	[0057.221] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1
	[0057.221] lstrlenW (lpString=".docx") returned 5
	[0057.221] lstrcmpiW (lpString1=".docx", lpString2="0.xsl") returned -1
	[0057.221] lstrlenW (lpString=".pdf") returned 4
	[0057.221] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1
	[0057.221] lstrlenW (lpString=".xls") returned 4
	[0057.221] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1
	[0057.221] lstrlenW (lpString=".xlsx") returned 5
	[0057.221] lstrcmpiW (lpString1=".xlsx", lpString2="0.xsl") returned -1
	[0057.221] lstrlenW (lpString=".ppt") returned 4
	[0057.221] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1
	[0057.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned 77
	[0057.221] lstrlenW (lpString=".zip") returned 4
	[0057.221] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1
	[0057.221] lstrlenW (lpString=".rar") returned 4
	[0057.221] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1
	[0057.221] lstrlenW (lpString=".bz2") returned 4
	[0057.221] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1
	[0057.221] lstrlenW (lpString=".7z") returned 3
	[0057.221] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1
	[0057.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned 77
	[0057.221] lstrlenW (lpString=".dbf") returned 4
	[0057.221] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1
	[0057.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned 77
	[0057.221] lstrlenW (lpString=".1cd") returned 4
	[0057.221] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1
	[0057.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned 77
	[0057.221] lstrlenW (lpString=".jpg") returned 4
	[0057.221] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1
	[0057.222] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.222] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0057.222] GetLastError () returned 0x0
	[0057.222] ReadFile (in: hFile=0x1a0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x9a5b, lpOverlapped=0x0) returned 1
	[0057.224] WriteFile (in: hFile=0x228, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x9a60, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x9a60, lpOverlapped=0x0) returned 1
	[0057.226] ReadFile (in: hFile=0x1a0, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.226] WriteFile (in: hFile=0x228, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0057.226] SetEndOfFile (hFile=0x228) returned 1
	[0057.227] CloseHandle (hObject=0x228) returned 1
	[0057.227] SetFilePointerEx (in: hFile=0x1a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.227] SetEndOfFile (hFile=0x1a0) returned 1
	[0057.228] CloseHandle (hObject=0x1a0) returned 1
	[0057.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.228] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 1
	[0057.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned 77
	[0057.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned 77
	[0057.405] lstrlenW (lpString=".doc") returned 4
	[0057.405] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1
	[0057.405] lstrlenW (lpString=".docx") returned 5
	[0057.405] lstrcmpiW (lpString1=".docx", lpString2="0.xsl") returned -1
	[0057.405] lstrlenW (lpString=".pdf") returned 4
	[0057.405] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1
	[0057.405] lstrlenW (lpString=".xls") returned 4
	[0057.405] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1
	[0057.405] lstrlenW (lpString=".xlsx") returned 5
	[0057.406] lstrcmpiW (lpString1=".xlsx", lpString2="0.xsl") returned -1
	[0057.406] lstrlenW (lpString=".ppt") returned 4
	[0057.406] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1
	[0057.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned 77
	[0057.406] lstrlenW (lpString=".zip") returned 4
	[0057.406] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1
	[0057.406] lstrlenW (lpString=".rar") returned 4
	[0057.406] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1
	[0057.406] lstrlenW (lpString=".bz2") returned 4
	[0057.406] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1
	[0057.406] lstrlenW (lpString=".7z") returned 3
	[0057.406] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1
	[0057.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned 77
	[0057.406] lstrlenW (lpString=".dbf") returned 4
	[0057.406] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1
	[0057.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned 77
	[0057.406] lstrlenW (lpString=".1cd") returned 4
	[0057.406] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1
	[0057.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned 77
	[0057.406] lstrlenW (lpString=".jpg") returned 4
	[0057.406] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1
	[0058.686] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.746] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0058.754] GetLastError () returned 0x0
	[0058.754] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x3a19, lpOverlapped=0x0) returned 1
	[0058.756] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x3a20, lpOverlapped=0x0) returned 1
	[0058.757] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.757] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.757] SetEndOfFile (hFile=0x23c) returned 1
	[0058.757] CloseHandle (hObject=0x23c) returned 1
	[0058.764] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.764] SetEndOfFile (hFile=0x238) returned 1
	[0058.764] CloseHandle (hObject=0x238) returned 1
	[0058.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.765] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif")) returned 1
	[0058.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 63
	[0058.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 63
	[0058.765] lstrlenW (lpString=".doc") returned 4
	[0058.765] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.765] lstrlenW (lpString=".docx") returned 5
	[0058.765] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.765] lstrlenW (lpString=".pdf") returned 4
	[0058.765] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.765] lstrlenW (lpString=".xls") returned 4
	[0058.765] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.765] lstrlenW (lpString=".xlsx") returned 5
	[0058.765] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.765] lstrlenW (lpString=".ppt") returned 4
	[0058.765] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 63
	[0058.765] lstrlenW (lpString=".zip") returned 4
	[0058.765] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.765] lstrlenW (lpString=".rar") returned 4
	[0058.765] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.766] lstrlenW (lpString=".bz2") returned 4
	[0058.766] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.766] lstrlenW (lpString=".7z") returned 3
	[0058.766] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 63
	[0058.766] lstrlenW (lpString=".dbf") returned 4
	[0058.766] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 63
	[0058.766] lstrlenW (lpString=".1cd") returned 4
	[0058.766] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 63
	[0058.766] lstrlenW (lpString=".jpg") returned 4
	[0058.766] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.766] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=3378) returned 1
	[0058.766] CloseHandle (hObject=0x238) returned 1
	[0058.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif")) returned 0x20
	[0058.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0058.767] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.767] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0058.767] GetLastError () returned 0x0
	[0058.767] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0xd32, lpOverlapped=0x0) returned 1
	[0058.768] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xd40, lpOverlapped=0x0) returned 1
	[0058.770] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.770] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.770] SetEndOfFile (hFile=0x23c) returned 1
	[0058.770] CloseHandle (hObject=0x23c) returned 1
	[0058.770] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.770] SetEndOfFile (hFile=0x238) returned 1
	[0058.771] CloseHandle (hObject=0x238) returned 1
	[0058.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.771] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif")) returned 1
	[0058.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 63
	[0058.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 63
	[0058.771] lstrlenW (lpString=".doc") returned 4
	[0058.771] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.771] lstrlenW (lpString=".docx") returned 5
	[0058.771] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.771] lstrlenW (lpString=".pdf") returned 4
	[0058.771] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.771] lstrlenW (lpString=".xls") returned 4
	[0058.771] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.771] lstrlenW (lpString=".xlsx") returned 5
	[0058.772] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.772] lstrlenW (lpString=".ppt") returned 4
	[0058.772] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 63
	[0058.772] lstrlenW (lpString=".zip") returned 4
	[0058.772] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.772] lstrlenW (lpString=".rar") returned 4
	[0058.772] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.772] lstrlenW (lpString=".bz2") returned 4
	[0058.772] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.772] lstrlenW (lpString=".7z") returned 3
	[0058.772] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 63
	[0058.772] lstrlenW (lpString=".dbf") returned 4
	[0058.772] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 63
	[0058.772] lstrlenW (lpString=".1cd") returned 4
	[0058.772] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 63
	[0058.772] lstrlenW (lpString=".jpg") returned 4
	[0058.772] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.772] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.772] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0058.773] GetLastError () returned 0x0
	[0058.773] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0xc30, lpOverlapped=0x0) returned 1
	[0058.775] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xc40, lpOverlapped=0x0) returned 1
	[0058.776] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.776] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.776] SetEndOfFile (hFile=0x23c) returned 1
	[0058.776] CloseHandle (hObject=0x23c) returned 1
	[0058.776] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.776] SetEndOfFile (hFile=0x238) returned 1
	[0058.777] CloseHandle (hObject=0x238) returned 1
	[0058.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.777] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif")) returned 1
	[0058.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 63
	[0058.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 63
	[0058.777] lstrlenW (lpString=".doc") returned 4
	[0058.778] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.778] lstrlenW (lpString=".docx") returned 5
	[0058.778] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.778] lstrlenW (lpString=".pdf") returned 4
	[0058.778] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.778] lstrlenW (lpString=".xls") returned 4
	[0058.778] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.778] lstrlenW (lpString=".xlsx") returned 5
	[0058.778] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.778] lstrlenW (lpString=".ppt") returned 4
	[0058.778] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 63
	[0058.778] lstrlenW (lpString=".zip") returned 4
	[0058.778] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.778] lstrlenW (lpString=".rar") returned 4
	[0058.778] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.778] lstrlenW (lpString=".bz2") returned 4
	[0058.778] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.778] lstrlenW (lpString=".7z") returned 3
	[0058.778] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 63
	[0058.778] lstrlenW (lpString=".dbf") returned 4
	[0058.778] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 63
	[0058.778] lstrlenW (lpString=".1cd") returned 4
	[0058.778] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 63
	[0058.778] lstrlenW (lpString=".jpg") returned 4
	[0058.778] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.779] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=3026) returned 1
	[0058.779] CloseHandle (hObject=0x238) returned 1
	[0058.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf")) returned 0x20
	[0058.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0058.780] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.780] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0058.780] GetLastError () returned 0x0
	[0058.780] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0xbd2, lpOverlapped=0x0) returned 1
	[0058.782] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xbe0, lpOverlapped=0x0) returned 1
	[0058.782] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.783] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.783] SetEndOfFile (hFile=0x23c) returned 1
	[0058.783] CloseHandle (hObject=0x23c) returned 1
	[0058.783] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.783] SetEndOfFile (hFile=0x238) returned 1
	[0058.784] CloseHandle (hObject=0x238) returned 1
	[0058.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.784] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf")) returned 1
	[0058.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 63
	[0058.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 63
	[0058.784] lstrlenW (lpString=".doc") returned 4
	[0058.784] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0058.784] lstrlenW (lpString=".docx") returned 5
	[0058.784] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0058.784] lstrlenW (lpString=".pdf") returned 4
	[0058.784] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0058.784] lstrlenW (lpString=".xls") returned 4
	[0058.784] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0058.784] lstrlenW (lpString=".xlsx") returned 5
	[0058.784] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0058.785] lstrlenW (lpString=".ppt") returned 4
	[0058.785] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0058.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 63
	[0058.785] lstrlenW (lpString=".zip") returned 4
	[0058.785] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0058.785] lstrlenW (lpString=".rar") returned 4
	[0058.785] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0058.785] lstrlenW (lpString=".bz2") returned 4
	[0058.785] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0058.785] lstrlenW (lpString=".7z") returned 3
	[0058.785] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0058.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 63
	[0058.785] lstrlenW (lpString=".dbf") returned 4
	[0058.785] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0058.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 63
	[0058.785] lstrlenW (lpString=".1cd") returned 4
	[0058.785] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0058.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 63
	[0058.785] lstrlenW (lpString=".jpg") returned 4
	[0058.785] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0058.785] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.785] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0058.786] GetLastError () returned 0x0
	[0058.786] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x127e, lpOverlapped=0x0) returned 1
	[0058.787] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x1280, lpOverlapped=0x0) returned 1
	[0058.789] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.789] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.789] SetEndOfFile (hFile=0x23c) returned 1
	[0058.789] CloseHandle (hObject=0x23c) returned 1
	[0058.789] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.789] SetEndOfFile (hFile=0x238) returned 1
	[0058.790] CloseHandle (hObject=0x238) returned 1
	[0058.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.790] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf")) returned 1
	[0058.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 63
	[0058.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 63
	[0058.791] lstrlenW (lpString=".doc") returned 4
	[0058.791] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0058.791] lstrlenW (lpString=".docx") returned 5
	[0058.791] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0058.791] lstrlenW (lpString=".pdf") returned 4
	[0058.791] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0058.791] lstrlenW (lpString=".xls") returned 4
	[0058.791] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0058.791] lstrlenW (lpString=".xlsx") returned 5
	[0058.791] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0058.791] lstrlenW (lpString=".ppt") returned 4
	[0058.791] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0058.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 63
	[0058.791] lstrlenW (lpString=".zip") returned 4
	[0058.791] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0058.791] lstrlenW (lpString=".rar") returned 4
	[0058.791] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0058.791] lstrlenW (lpString=".bz2") returned 4
	[0058.791] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0058.791] lstrlenW (lpString=".7z") returned 3
	[0058.791] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0058.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 63
	[0058.791] lstrlenW (lpString=".dbf") returned 4
	[0058.791] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0058.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 63
	[0058.791] lstrlenW (lpString=".1cd") returned 4
	[0058.791] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0058.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 63
	[0058.792] lstrlenW (lpString=".jpg") returned 4
	[0058.792] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0058.792] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x7b1ff1c | out: lpFileSize=0x7b1ff1c*=5684) returned 1
	[0058.792] CloseHandle (hObject=0x238) returned 1
	[0058.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf")) returned 0x20
	[0058.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0058.793] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.793] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0058.793] GetLastError () returned 0x0
	[0058.793] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x1634, lpOverlapped=0x0) returned 1
	[0058.795] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x1640, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x1640, lpOverlapped=0x0) returned 1
	[0058.796] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.796] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.796] SetEndOfFile (hFile=0x23c) returned 1
	[0058.796] CloseHandle (hObject=0x23c) returned 1
	[0058.796] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.796] SetEndOfFile (hFile=0x238) returned 1
	[0058.797] CloseHandle (hObject=0x238) returned 1
	[0058.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.797] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf")) returned 1
	[0058.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 63
	[0058.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 63
	[0058.798] lstrlenW (lpString=".doc") returned 4
	[0058.798] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0058.798] lstrlenW (lpString=".docx") returned 5
	[0058.798] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0058.798] lstrlenW (lpString=".pdf") returned 4
	[0058.798] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0058.798] lstrlenW (lpString=".xls") returned 4
	[0058.798] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0058.798] lstrlenW (lpString=".xlsx") returned 5
	[0058.798] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0058.798] lstrlenW (lpString=".ppt") returned 4
	[0058.798] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0058.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 63
	[0058.798] lstrlenW (lpString=".zip") returned 4
	[0058.798] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0058.798] lstrlenW (lpString=".rar") returned 4
	[0058.798] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0058.798] lstrlenW (lpString=".bz2") returned 4
	[0058.798] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0058.798] lstrlenW (lpString=".7z") returned 3
	[0058.798] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0058.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 63
	[0058.798] lstrlenW (lpString=".dbf") returned 4
	[0058.798] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0058.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 63
	[0058.798] lstrlenW (lpString=".1cd") returned 4
	[0058.798] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0058.799] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 63
	[0058.799] lstrlenW (lpString=".jpg") returned 4
	[0058.799] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0058.799] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.799] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0058.799] GetLastError () returned 0x0
	[0058.799] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x5062, lpOverlapped=0x0) returned 1
	[0058.923] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x5070, lpOverlapped=0x0) returned 1
	[0058.924] ReadFile (in: hFile=0x238, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.924] WriteFile (in: hFile=0x23c, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.924] SetEndOfFile (hFile=0x23c) returned 1
	[0059.281] CloseHandle (hObject=0x23c) returned 1
	[0059.281] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.281] SetEndOfFile (hFile=0x238) returned 1
	[0059.282] CloseHandle (hObject=0x238) returned 1
	[0059.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0059.282] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf")) returned 1
	[0059.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 63
	[0059.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 63
	[0059.538] lstrlenW (lpString=".doc") returned 4
	[0059.539] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0059.539] lstrlenW (lpString=".docx") returned 5
	[0059.539] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0059.539] lstrlenW (lpString=".pdf") returned 4
	[0059.539] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0059.539] lstrlenW (lpString=".xls") returned 4
	[0059.539] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0059.539] lstrlenW (lpString=".xlsx") returned 5
	[0059.539] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0059.539] lstrlenW (lpString=".ppt") returned 4
	[0059.539] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0059.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 63
	[0059.539] lstrlenW (lpString=".zip") returned 4
	[0059.539] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0059.539] lstrlenW (lpString=".rar") returned 4
	[0059.539] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0059.539] lstrlenW (lpString=".bz2") returned 4
	[0059.539] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0059.539] lstrlenW (lpString=".7z") returned 3
	[0059.539] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0059.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 63
	[0059.539] lstrlenW (lpString=".dbf") returned 4
	[0059.539] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0059.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 63
	[0059.539] lstrlenW (lpString=".1cd") returned 4
	[0059.539] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0059.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 63
	[0059.539] lstrlenW (lpString=".jpg") returned 4
	[0059.539] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0060.634] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.634] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0060.634] GetLastError () returned 0x0
	[0060.634] ReadFile (in: hFile=0x1b8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x66dc, lpOverlapped=0x0) returned 1
	[0060.636] WriteFile (in: hFile=0x194, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x66e0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x66e0, lpOverlapped=0x0) returned 1
	[0060.638] ReadFile (in: hFile=0x1b8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.638] WriteFile (in: hFile=0x194, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0060.638] SetEndOfFile (hFile=0x194) returned 1
	[0060.638] CloseHandle (hObject=0x194) returned 1
	[0060.638] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.638] SetEndOfFile (hFile=0x1b8) returned 1
	[0060.639] CloseHandle (hObject=0x1b8) returned 1
	[0060.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.639] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf")) returned 1
	[0060.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 63
	[0060.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 63
	[0060.640] lstrlenW (lpString=".doc") returned 4
	[0060.640] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0060.640] lstrlenW (lpString=".docx") returned 5
	[0060.640] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0060.640] lstrlenW (lpString=".pdf") returned 4
	[0060.640] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0060.640] lstrlenW (lpString=".xls") returned 4
	[0060.640] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0060.640] lstrlenW (lpString=".xlsx") returned 5
	[0060.640] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0060.640] lstrlenW (lpString=".ppt") returned 4
	[0060.640] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0060.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 63
	[0060.640] lstrlenW (lpString=".zip") returned 4
	[0060.640] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0060.640] lstrlenW (lpString=".rar") returned 4
	[0060.640] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0060.640] lstrlenW (lpString=".bz2") returned 4
	[0060.640] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0060.640] lstrlenW (lpString=".7z") returned 3
	[0060.640] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0060.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 63
	[0060.640] lstrlenW (lpString=".dbf") returned 4
	[0060.640] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0060.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 63
	[0060.640] lstrlenW (lpString=".1cd") returned 4
	[0060.640] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0060.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 63
	[0060.641] lstrlenW (lpString=".jpg") returned 4
	[0060.641] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.305] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.305] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0061.306] GetLastError () returned 0x0
	[0061.306] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x19e8, lpOverlapped=0x0) returned 1
	[0061.307] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x19f0, lpOverlapped=0x0) returned 1
	[0061.308] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.308] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.308] SetEndOfFile (hFile=0x210) returned 1
	[0061.308] CloseHandle (hObject=0x210) returned 1
	[0061.309] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.309] SetEndOfFile (hFile=0x1f8) returned 1
	[0061.309] CloseHandle (hObject=0x1f8) returned 1
	[0061.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.310] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf")) returned 1
	[0061.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 63
	[0061.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 63
	[0061.310] lstrlenW (lpString=".doc") returned 4
	[0061.310] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.310] lstrlenW (lpString=".docx") returned 5
	[0061.310] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.310] lstrlenW (lpString=".pdf") returned 4
	[0061.310] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.310] lstrlenW (lpString=".xls") returned 4
	[0061.310] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.310] lstrlenW (lpString=".xlsx") returned 5
	[0061.310] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.310] lstrlenW (lpString=".ppt") returned 4
	[0061.310] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 63
	[0061.310] lstrlenW (lpString=".zip") returned 4
	[0061.310] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.311] lstrlenW (lpString=".rar") returned 4
	[0061.311] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.311] lstrlenW (lpString=".bz2") returned 4
	[0061.311] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.311] lstrlenW (lpString=".7z") returned 3
	[0061.311] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 63
	[0061.311] lstrlenW (lpString=".dbf") returned 4
	[0061.311] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 63
	[0061.311] lstrlenW (lpString=".1cd") returned 4
	[0061.311] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 63
	[0061.311] lstrlenW (lpString=".jpg") returned 4
	[0061.311] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.311] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.311] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0061.312] GetLastError () returned 0x0
	[0061.312] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x212c, lpOverlapped=0x0) returned 1
	[0061.313] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x2130, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x2130, lpOverlapped=0x0) returned 1
	[0061.314] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.314] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.314] SetEndOfFile (hFile=0x210) returned 1
	[0061.315] CloseHandle (hObject=0x210) returned 1
	[0061.315] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.315] SetEndOfFile (hFile=0x1f8) returned 1
	[0061.316] CloseHandle (hObject=0x1f8) returned 1
	[0061.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.317] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf")) returned 1
	[0061.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 63
	[0061.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 63
	[0061.317] lstrlenW (lpString=".doc") returned 4
	[0061.317] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.317] lstrlenW (lpString=".docx") returned 5
	[0061.317] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.317] lstrlenW (lpString=".pdf") returned 4
	[0061.317] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.317] lstrlenW (lpString=".xls") returned 4
	[0061.317] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.317] lstrlenW (lpString=".xlsx") returned 5
	[0061.317] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.317] lstrlenW (lpString=".ppt") returned 4
	[0061.317] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 63
	[0061.317] lstrlenW (lpString=".zip") returned 4
	[0061.317] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.317] lstrlenW (lpString=".rar") returned 4
	[0061.318] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.318] lstrlenW (lpString=".bz2") returned 4
	[0061.318] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.318] lstrlenW (lpString=".7z") returned 3
	[0061.318] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 63
	[0061.318] lstrlenW (lpString=".dbf") returned 4
	[0061.318] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 63
	[0061.318] lstrlenW (lpString=".1cd") returned 4
	[0061.318] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 63
	[0061.318] lstrlenW (lpString=".jpg") returned 4
	[0061.318] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.318] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.318] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0061.319] GetLastError () returned 0x0
	[0061.319] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x1e7c, lpOverlapped=0x0) returned 1
	[0061.320] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x1e80, lpOverlapped=0x0) returned 1
	[0061.321] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.321] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.321] SetEndOfFile (hFile=0x210) returned 1
	[0061.321] CloseHandle (hObject=0x210) returned 1
	[0061.322] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.322] SetEndOfFile (hFile=0x1f8) returned 1
	[0061.322] CloseHandle (hObject=0x1f8) returned 1
	[0061.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.323] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf")) returned 1
	[0061.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 63
	[0061.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 63
	[0061.323] lstrlenW (lpString=".doc") returned 4
	[0061.323] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.323] lstrlenW (lpString=".docx") returned 5
	[0061.323] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.323] lstrlenW (lpString=".pdf") returned 4
	[0061.323] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.323] lstrlenW (lpString=".xls") returned 4
	[0061.323] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.323] lstrlenW (lpString=".xlsx") returned 5
	[0061.323] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.323] lstrlenW (lpString=".ppt") returned 4
	[0061.323] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 63
	[0061.323] lstrlenW (lpString=".zip") returned 4
	[0061.323] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.323] lstrlenW (lpString=".rar") returned 4
	[0061.323] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.323] lstrlenW (lpString=".bz2") returned 4
	[0061.323] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.324] lstrlenW (lpString=".7z") returned 3
	[0061.324] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 63
	[0061.324] lstrlenW (lpString=".dbf") returned 4
	[0061.324] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 63
	[0061.324] lstrlenW (lpString=".1cd") returned 4
	[0061.324] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 63
	[0061.324] lstrlenW (lpString=".jpg") returned 4
	[0061.324] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.324] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.324] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0061.324] GetLastError () returned 0x0
	[0061.325] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x1e7c, lpOverlapped=0x0) returned 1
	[0061.326] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x1e80, lpOverlapped=0x0) returned 1
	[0061.327] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.327] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.327] SetEndOfFile (hFile=0x210) returned 1
	[0061.327] CloseHandle (hObject=0x210) returned 1
	[0061.327] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.327] SetEndOfFile (hFile=0x1f8) returned 1
	[0061.328] CloseHandle (hObject=0x1f8) returned 1
	[0061.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.329] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf")) returned 1
	[0061.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 63
	[0061.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 63
	[0061.329] lstrlenW (lpString=".doc") returned 4
	[0061.329] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.329] lstrlenW (lpString=".docx") returned 5
	[0061.329] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.329] lstrlenW (lpString=".pdf") returned 4
	[0061.329] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.329] lstrlenW (lpString=".xls") returned 4
	[0061.329] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.329] lstrlenW (lpString=".xlsx") returned 5
	[0061.329] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.329] lstrlenW (lpString=".ppt") returned 4
	[0061.329] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 63
	[0061.329] lstrlenW (lpString=".zip") returned 4
	[0061.329] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.329] lstrlenW (lpString=".rar") returned 4
	[0061.329] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.329] lstrlenW (lpString=".bz2") returned 4
	[0061.329] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.329] lstrlenW (lpString=".7z") returned 3
	[0061.329] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 63
	[0061.330] lstrlenW (lpString=".dbf") returned 4
	[0061.330] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 63
	[0061.330] lstrlenW (lpString=".1cd") returned 4
	[0061.330] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 63
	[0061.330] lstrlenW (lpString=".jpg") returned 4
	[0061.330] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.330] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.330] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0061.330] GetLastError () returned 0x0
	[0061.330] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x7e0, lpOverlapped=0x0) returned 1
	[0061.332] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x7f0, lpOverlapped=0x0) returned 1
	[0061.333] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.333] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.333] SetEndOfFile (hFile=0x210) returned 1
	[0061.333] CloseHandle (hObject=0x210) returned 1
	[0061.333] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.333] SetEndOfFile (hFile=0x1f8) returned 1
	[0061.334] CloseHandle (hObject=0x1f8) returned 1
	[0061.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.335] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf")) returned 1
	[0061.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 63
	[0061.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 63
	[0061.335] lstrlenW (lpString=".doc") returned 4
	[0061.335] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.335] lstrlenW (lpString=".docx") returned 5
	[0061.335] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.335] lstrlenW (lpString=".pdf") returned 4
	[0061.335] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.335] lstrlenW (lpString=".xls") returned 4
	[0061.335] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.335] lstrlenW (lpString=".xlsx") returned 5
	[0061.335] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.335] lstrlenW (lpString=".ppt") returned 4
	[0061.335] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 63
	[0061.335] lstrlenW (lpString=".zip") returned 4
	[0061.335] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.335] lstrlenW (lpString=".rar") returned 4
	[0061.335] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.335] lstrlenW (lpString=".bz2") returned 4
	[0061.335] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.335] lstrlenW (lpString=".7z") returned 3
	[0061.335] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 63
	[0061.336] lstrlenW (lpString=".dbf") returned 4
	[0061.336] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 63
	[0061.336] lstrlenW (lpString=".1cd") returned 4
	[0061.336] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 63
	[0061.336] lstrlenW (lpString=".jpg") returned 4
	[0061.336] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.337] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.337] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0061.337] GetLastError () returned 0x0
	[0061.337] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x9bc, lpOverlapped=0x0) returned 1
	[0061.339] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x9c0, lpOverlapped=0x0) returned 1
	[0061.340] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.340] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.340] SetEndOfFile (hFile=0x210) returned 1
	[0061.340] CloseHandle (hObject=0x210) returned 1
	[0061.340] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.340] SetEndOfFile (hFile=0x1f8) returned 1
	[0061.341] CloseHandle (hObject=0x1f8) returned 1
	[0061.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.341] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf")) returned 1
	[0061.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 63
	[0061.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 63
	[0061.341] lstrlenW (lpString=".doc") returned 4
	[0061.342] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.342] lstrlenW (lpString=".docx") returned 5
	[0061.342] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.342] lstrlenW (lpString=".pdf") returned 4
	[0061.342] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.342] lstrlenW (lpString=".xls") returned 4
	[0061.342] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.342] lstrlenW (lpString=".xlsx") returned 5
	[0061.342] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.342] lstrlenW (lpString=".ppt") returned 4
	[0061.342] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 63
	[0061.342] lstrlenW (lpString=".zip") returned 4
	[0061.342] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.342] lstrlenW (lpString=".rar") returned 4
	[0061.342] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.342] lstrlenW (lpString=".bz2") returned 4
	[0061.342] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.342] lstrlenW (lpString=".7z") returned 3
	[0061.342] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 63
	[0061.342] lstrlenW (lpString=".dbf") returned 4
	[0061.342] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 63
	[0061.342] lstrlenW (lpString=".1cd") returned 4
	[0061.342] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 63
	[0061.342] lstrlenW (lpString=".jpg") returned 4
	[0061.342] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0061.343] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.343] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0061.343] GetLastError () returned 0x0
	[0061.343] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0xd14, lpOverlapped=0x0) returned 1
	[0061.655] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xd20, lpOverlapped=0x0) returned 1
	[0061.656] ReadFile (in: hFile=0x1f8, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.656] WriteFile (in: hFile=0x210, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.656] SetEndOfFile (hFile=0x210) returned 1
	[0061.855] CloseHandle (hObject=0x210) returned 1
	[0061.855] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.855] SetEndOfFile (hFile=0x1f8) returned 1
	[0061.856] CloseHandle (hObject=0x1f8) returned 1
	[0061.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.856] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf")) returned 1
	[0062.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 63
	[0062.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 63
	[0062.685] lstrlenW (lpString=".doc") returned 4
	[0062.685] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.685] lstrlenW (lpString=".docx") returned 5
	[0062.685] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.685] lstrlenW (lpString=".pdf") returned 4
	[0062.685] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.685] lstrlenW (lpString=".xls") returned 4
	[0062.685] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.685] lstrlenW (lpString=".xlsx") returned 5
	[0062.685] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.685] lstrlenW (lpString=".ppt") returned 4
	[0062.685] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 63
	[0062.685] lstrlenW (lpString=".zip") returned 4
	[0062.685] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.685] lstrlenW (lpString=".rar") returned 4
	[0062.686] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.686] lstrlenW (lpString=".bz2") returned 4
	[0062.686] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.686] lstrlenW (lpString=".7z") returned 3
	[0062.686] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 63
	[0062.686] lstrlenW (lpString=".dbf") returned 4
	[0062.686] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 63
	[0062.686] lstrlenW (lpString=".1cd") returned 4
	[0062.686] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 63
	[0062.686] lstrlenW (lpString=".jpg") returned 4
	[0062.686] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.686] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.686] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.687] GetLastError () returned 0x0
	[0062.687] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x1384, lpOverlapped=0x0) returned 1
	[0062.694] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x1390, lpOverlapped=0x0) returned 1
	[0062.695] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.695] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.695] SetEndOfFile (hFile=0x1ac) returned 1
	[0062.695] CloseHandle (hObject=0x1ac) returned 1
	[0062.696] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.696] SetEndOfFile (hFile=0x1dc) returned 1
	[0062.696] CloseHandle (hObject=0x1dc) returned 1
	[0062.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.697] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf")) returned 1
	[0062.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 63
	[0062.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 63
	[0062.697] lstrlenW (lpString=".doc") returned 4
	[0062.697] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.697] lstrlenW (lpString=".docx") returned 5
	[0062.697] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.697] lstrlenW (lpString=".pdf") returned 4
	[0062.697] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.697] lstrlenW (lpString=".xls") returned 4
	[0062.697] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.697] lstrlenW (lpString=".xlsx") returned 5
	[0062.697] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.697] lstrlenW (lpString=".ppt") returned 4
	[0062.697] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 63
	[0062.697] lstrlenW (lpString=".zip") returned 4
	[0062.697] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.697] lstrlenW (lpString=".rar") returned 4
	[0062.697] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.697] lstrlenW (lpString=".bz2") returned 4
	[0062.697] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.698] lstrlenW (lpString=".7z") returned 3
	[0062.698] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 63
	[0062.698] lstrlenW (lpString=".dbf") returned 4
	[0062.698] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 63
	[0062.698] lstrlenW (lpString=".1cd") returned 4
	[0062.698] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 63
	[0062.698] lstrlenW (lpString=".jpg") returned 4
	[0062.698] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.698] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.698] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.699] GetLastError () returned 0x0
	[0062.699] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x138c, lpOverlapped=0x0) returned 1
	[0062.702] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x1390, lpOverlapped=0x0) returned 1
	[0062.703] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.703] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.703] SetEndOfFile (hFile=0x1ac) returned 1
	[0062.704] CloseHandle (hObject=0x1ac) returned 1
	[0062.704] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.704] SetEndOfFile (hFile=0x1dc) returned 1
	[0062.705] CloseHandle (hObject=0x1dc) returned 1
	[0062.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.705] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf")) returned 1
	[0062.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 63
	[0062.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 63
	[0062.705] lstrlenW (lpString=".doc") returned 4
	[0062.705] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.705] lstrlenW (lpString=".docx") returned 5
	[0062.705] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.705] lstrlenW (lpString=".pdf") returned 4
	[0062.705] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.706] lstrlenW (lpString=".xls") returned 4
	[0062.706] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.706] lstrlenW (lpString=".xlsx") returned 5
	[0062.706] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.706] lstrlenW (lpString=".ppt") returned 4
	[0062.706] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 63
	[0062.706] lstrlenW (lpString=".zip") returned 4
	[0062.706] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.706] lstrlenW (lpString=".rar") returned 4
	[0062.706] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.706] lstrlenW (lpString=".bz2") returned 4
	[0062.706] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.706] lstrlenW (lpString=".7z") returned 3
	[0062.706] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 63
	[0062.706] lstrlenW (lpString=".dbf") returned 4
	[0062.706] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 63
	[0062.706] lstrlenW (lpString=".1cd") returned 4
	[0062.706] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 63
	[0062.706] lstrlenW (lpString=".jpg") returned 4
	[0062.706] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.717] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.717] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.718] GetLastError () returned 0x0
	[0062.718] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x1306, lpOverlapped=0x0) returned 1
	[0062.735] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x1310, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x1310, lpOverlapped=0x0) returned 1
	[0062.736] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.736] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.736] SetEndOfFile (hFile=0x1ac) returned 1
	[0062.737] CloseHandle (hObject=0x1ac) returned 1
	[0062.737] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.737] SetEndOfFile (hFile=0x1dc) returned 1
	[0062.738] CloseHandle (hObject=0x1dc) returned 1
	[0062.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.738] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf")) returned 1
	[0062.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 63
	[0062.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 63
	[0062.738] lstrlenW (lpString=".doc") returned 4
	[0062.738] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.738] lstrlenW (lpString=".docx") returned 5
	[0062.738] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.738] lstrlenW (lpString=".pdf") returned 4
	[0062.738] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.738] lstrlenW (lpString=".xls") returned 4
	[0062.738] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.738] lstrlenW (lpString=".xlsx") returned 5
	[0062.738] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.739] lstrlenW (lpString=".ppt") returned 4
	[0062.739] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 63
	[0062.739] lstrlenW (lpString=".zip") returned 4
	[0062.739] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.739] lstrlenW (lpString=".rar") returned 4
	[0062.739] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.739] lstrlenW (lpString=".bz2") returned 4
	[0062.739] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.739] lstrlenW (lpString=".7z") returned 3
	[0062.739] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 63
	[0062.739] lstrlenW (lpString=".dbf") returned 4
	[0062.739] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 63
	[0062.739] lstrlenW (lpString=".1cd") returned 4
	[0062.739] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 63
	[0062.739] lstrlenW (lpString=".jpg") returned 4
	[0062.739] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.739] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.740] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.740] GetLastError () returned 0x0
	[0062.740] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x6906, lpOverlapped=0x0) returned 1
	[0062.742] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x6910, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x6910, lpOverlapped=0x0) returned 1
	[0062.743] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.743] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.743] SetEndOfFile (hFile=0x1ac) returned 1
	[0062.743] CloseHandle (hObject=0x1ac) returned 1
	[0062.743] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.744] SetEndOfFile (hFile=0x1dc) returned 1
	[0062.744] CloseHandle (hObject=0x1dc) returned 1
	[0062.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.745] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf")) returned 1
	[0062.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 63
	[0062.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 63
	[0062.745] lstrlenW (lpString=".doc") returned 4
	[0062.745] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.745] lstrlenW (lpString=".docx") returned 5
	[0062.745] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.745] lstrlenW (lpString=".pdf") returned 4
	[0062.745] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.745] lstrlenW (lpString=".xls") returned 4
	[0062.745] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.745] lstrlenW (lpString=".xlsx") returned 5
	[0062.745] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.745] lstrlenW (lpString=".ppt") returned 4
	[0062.745] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 63
	[0062.745] lstrlenW (lpString=".zip") returned 4
	[0062.745] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.745] lstrlenW (lpString=".rar") returned 4
	[0062.745] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.746] lstrlenW (lpString=".bz2") returned 4
	[0062.746] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.746] lstrlenW (lpString=".7z") returned 3
	[0062.746] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 63
	[0062.746] lstrlenW (lpString=".dbf") returned 4
	[0062.746] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 63
	[0062.746] lstrlenW (lpString=".1cd") returned 4
	[0062.746] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 63
	[0062.746] lstrlenW (lpString=".jpg") returned 4
	[0062.746] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.746] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.746] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.747] GetLastError () returned 0x0
	[0062.747] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x7114, lpOverlapped=0x0) returned 1
	[0062.749] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x7120, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x7120, lpOverlapped=0x0) returned 1
	[0062.750] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.750] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.750] SetEndOfFile (hFile=0x1ac) returned 1
	[0062.751] CloseHandle (hObject=0x1ac) returned 1
	[0062.751] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.751] SetEndOfFile (hFile=0x1dc) returned 1
	[0062.752] CloseHandle (hObject=0x1dc) returned 1
	[0062.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.752] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf")) returned 1
	[0062.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 63
	[0062.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 63
	[0062.752] lstrlenW (lpString=".doc") returned 4
	[0062.752] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.752] lstrlenW (lpString=".docx") returned 5
	[0062.752] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.752] lstrlenW (lpString=".pdf") returned 4
	[0062.752] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.753] lstrlenW (lpString=".xls") returned 4
	[0062.753] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.753] lstrlenW (lpString=".xlsx") returned 5
	[0062.753] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.753] lstrlenW (lpString=".ppt") returned 4
	[0062.753] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 63
	[0062.753] lstrlenW (lpString=".zip") returned 4
	[0062.753] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.753] lstrlenW (lpString=".rar") returned 4
	[0062.753] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.753] lstrlenW (lpString=".bz2") returned 4
	[0062.753] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.753] lstrlenW (lpString=".7z") returned 3
	[0062.753] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 63
	[0062.753] lstrlenW (lpString=".dbf") returned 4
	[0062.753] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 63
	[0062.753] lstrlenW (lpString=".1cd") returned 4
	[0062.753] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 63
	[0062.753] lstrlenW (lpString=".jpg") returned 4
	[0062.753] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.753] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.754] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.754] GetLastError () returned 0x0
	[0062.754] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x2d74, lpOverlapped=0x0) returned 1
	[0062.965] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x2d80, lpOverlapped=0x0) returned 1
	[0062.966] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.966] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.966] SetEndOfFile (hFile=0x1ac) returned 1
	[0062.967] CloseHandle (hObject=0x1ac) returned 1
	[0062.967] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.967] SetEndOfFile (hFile=0x1dc) returned 1
	[0062.968] CloseHandle (hObject=0x1dc) returned 1
	[0062.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.968] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf")) returned 1
	[0062.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 63
	[0062.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 63
	[0062.968] lstrlenW (lpString=".doc") returned 4
	[0062.968] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.968] lstrlenW (lpString=".docx") returned 5
	[0062.968] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.968] lstrlenW (lpString=".pdf") returned 4
	[0062.968] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.968] lstrlenW (lpString=".xls") returned 4
	[0062.968] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.968] lstrlenW (lpString=".xlsx") returned 5
	[0062.968] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.969] lstrlenW (lpString=".ppt") returned 4
	[0062.969] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 63
	[0062.969] lstrlenW (lpString=".zip") returned 4
	[0062.969] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.969] lstrlenW (lpString=".rar") returned 4
	[0062.969] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.969] lstrlenW (lpString=".bz2") returned 4
	[0062.969] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.969] lstrlenW (lpString=".7z") returned 3
	[0062.969] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 63
	[0062.969] lstrlenW (lpString=".dbf") returned 4
	[0062.969] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 63
	[0062.969] lstrlenW (lpString=".1cd") returned 4
	[0062.969] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 63
	[0062.969] lstrlenW (lpString=".jpg") returned 4
	[0062.969] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.970] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.970] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.970] GetLastError () returned 0x0
	[0062.970] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x34cb, lpOverlapped=0x0) returned 1
	[0062.972] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x34d0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x34d0, lpOverlapped=0x0) returned 1
	[0062.974] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.974] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.974] SetEndOfFile (hFile=0x1ac) returned 1
	[0062.974] CloseHandle (hObject=0x1ac) returned 1
	[0062.974] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.974] SetEndOfFile (hFile=0x1dc) returned 1
	[0062.975] CloseHandle (hObject=0x1dc) returned 1
	[0062.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.975] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif")) returned 1
	[0062.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 63
	[0062.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 63
	[0062.975] lstrlenW (lpString=".doc") returned 4
	[0062.976] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0062.976] lstrlenW (lpString=".docx") returned 5
	[0062.976] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0062.976] lstrlenW (lpString=".pdf") returned 4
	[0062.976] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0062.976] lstrlenW (lpString=".xls") returned 4
	[0062.976] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0062.976] lstrlenW (lpString=".xlsx") returned 5
	[0062.976] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0062.976] lstrlenW (lpString=".ppt") returned 4
	[0062.976] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0062.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 63
	[0062.976] lstrlenW (lpString=".zip") returned 4
	[0062.976] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0062.976] lstrlenW (lpString=".rar") returned 4
	[0062.976] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0062.976] lstrlenW (lpString=".bz2") returned 4
	[0062.976] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0062.976] lstrlenW (lpString=".7z") returned 3
	[0062.976] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0062.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 63
	[0062.976] lstrlenW (lpString=".dbf") returned 4
	[0062.976] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0062.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 63
	[0062.976] lstrlenW (lpString=".1cd") returned 4
	[0062.976] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0062.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 63
	[0062.976] lstrlenW (lpString=".jpg") returned 4
	[0062.976] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0062.977] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.977] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.978] GetLastError () returned 0x0
	[0062.978] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x4edd, lpOverlapped=0x0) returned 1
	[0062.988] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x4ee0, lpOverlapped=0x0) returned 1
	[0062.990] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.990] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.990] SetEndOfFile (hFile=0x1ac) returned 1
	[0062.991] CloseHandle (hObject=0x1ac) returned 1
	[0062.991] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.991] SetEndOfFile (hFile=0x1dc) returned 1
	[0062.992] CloseHandle (hObject=0x1dc) returned 1
	[0062.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.992] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif")) returned 1
	[0062.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 63
	[0062.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 63
	[0062.992] lstrlenW (lpString=".doc") returned 4
	[0062.992] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0062.992] lstrlenW (lpString=".docx") returned 5
	[0062.992] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0062.992] lstrlenW (lpString=".pdf") returned 4
	[0062.992] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0062.992] lstrlenW (lpString=".xls") returned 4
	[0062.993] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0062.993] lstrlenW (lpString=".xlsx") returned 5
	[0062.993] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0062.993] lstrlenW (lpString=".ppt") returned 4
	[0062.993] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0062.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 63
	[0062.993] lstrlenW (lpString=".zip") returned 4
	[0062.993] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0062.993] lstrlenW (lpString=".rar") returned 4
	[0062.993] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0062.993] lstrlenW (lpString=".bz2") returned 4
	[0062.993] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0062.993] lstrlenW (lpString=".7z") returned 3
	[0062.993] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0062.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 63
	[0062.993] lstrlenW (lpString=".dbf") returned 4
	[0062.993] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0062.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 63
	[0062.993] lstrlenW (lpString=".1cd") returned 4
	[0062.993] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0062.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 63
	[0062.993] lstrlenW (lpString=".jpg") returned 4
	[0062.993] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0062.994] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.994] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.994] GetLastError () returned 0x0
	[0062.994] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x4fe6, lpOverlapped=0x0) returned 1
	[0062.996] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x4ff0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x4ff0, lpOverlapped=0x0) returned 1
	[0062.997] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.997] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.997] SetEndOfFile (hFile=0x1ac) returned 1
	[0062.998] CloseHandle (hObject=0x1ac) returned 1
	[0062.998] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.998] SetEndOfFile (hFile=0x1dc) returned 1
	[0062.999] CloseHandle (hObject=0x1dc) returned 1
	[0062.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.999] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif")) returned 1
	[0062.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 63
	[0062.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 63
	[0062.999] lstrlenW (lpString=".doc") returned 4
	[0062.999] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0062.999] lstrlenW (lpString=".docx") returned 5
	[0062.999] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0062.999] lstrlenW (lpString=".pdf") returned 4
	[0062.999] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0062.999] lstrlenW (lpString=".xls") returned 4
	[0062.999] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0062.999] lstrlenW (lpString=".xlsx") returned 5
	[0062.999] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0062.999] lstrlenW (lpString=".ppt") returned 4
	[0062.999] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0063.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 63
	[0063.000] lstrlenW (lpString=".zip") returned 4
	[0063.000] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0063.000] lstrlenW (lpString=".rar") returned 4
	[0063.000] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0063.000] lstrlenW (lpString=".bz2") returned 4
	[0063.000] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0063.000] lstrlenW (lpString=".7z") returned 3
	[0063.000] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0063.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 63
	[0063.000] lstrlenW (lpString=".dbf") returned 4
	[0063.000] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0063.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 63
	[0063.000] lstrlenW (lpString=".1cd") returned 4
	[0063.000] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0063.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 63
	[0063.000] lstrlenW (lpString=".jpg") returned 4
	[0063.000] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0063.000] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.000] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.001] GetLastError () returned 0x0
	[0063.001] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x3d75, lpOverlapped=0x0) returned 1
	[0063.003] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x3d80, lpOverlapped=0x0) returned 1
	[0063.004] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.004] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.004] SetEndOfFile (hFile=0x1ac) returned 1
	[0063.004] CloseHandle (hObject=0x1ac) returned 1
	[0063.004] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.004] SetEndOfFile (hFile=0x1dc) returned 1
	[0063.005] CloseHandle (hObject=0x1dc) returned 1
	[0063.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.005] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif")) returned 1
	[0063.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 63
	[0063.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 63
	[0063.006] lstrlenW (lpString=".doc") returned 4
	[0063.006] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0063.006] lstrlenW (lpString=".docx") returned 5
	[0063.006] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0063.006] lstrlenW (lpString=".pdf") returned 4
	[0063.006] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0063.006] lstrlenW (lpString=".xls") returned 4
	[0063.006] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0063.006] lstrlenW (lpString=".xlsx") returned 5
	[0063.006] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0063.006] lstrlenW (lpString=".ppt") returned 4
	[0063.006] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0063.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 63
	[0063.006] lstrlenW (lpString=".zip") returned 4
	[0063.006] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0063.006] lstrlenW (lpString=".rar") returned 4
	[0063.006] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0063.006] lstrlenW (lpString=".bz2") returned 4
	[0063.006] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0063.006] lstrlenW (lpString=".7z") returned 3
	[0063.006] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0063.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 63
	[0063.006] lstrlenW (lpString=".dbf") returned 4
	[0063.006] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0063.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 63
	[0063.006] lstrlenW (lpString=".1cd") returned 4
	[0063.006] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0063.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 63
	[0063.007] lstrlenW (lpString=".jpg") returned 4
	[0063.007] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0063.007] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.007] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.007] GetLastError () returned 0x0
	[0063.007] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x32b6, lpOverlapped=0x0) returned 1
	[0063.010] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x32c0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x32c0, lpOverlapped=0x0) returned 1
	[0063.011] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.011] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.011] SetEndOfFile (hFile=0x1ac) returned 1
	[0063.011] CloseHandle (hObject=0x1ac) returned 1
	[0063.012] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.012] SetEndOfFile (hFile=0x1dc) returned 1
	[0063.013] CloseHandle (hObject=0x1dc) returned 1
	[0063.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.013] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf")) returned 1
	[0063.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 63
	[0063.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 63
	[0063.013] lstrlenW (lpString=".doc") returned 4
	[0063.013] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0063.013] lstrlenW (lpString=".docx") returned 5
	[0063.013] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0063.013] lstrlenW (lpString=".pdf") returned 4
	[0063.013] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0063.013] lstrlenW (lpString=".xls") returned 4
	[0063.013] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0063.013] lstrlenW (lpString=".xlsx") returned 5
	[0063.013] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0063.013] lstrlenW (lpString=".ppt") returned 4
	[0063.013] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0063.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 63
	[0063.014] lstrlenW (lpString=".zip") returned 4
	[0063.014] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0063.014] lstrlenW (lpString=".rar") returned 4
	[0063.014] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0063.014] lstrlenW (lpString=".bz2") returned 4
	[0063.014] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0063.014] lstrlenW (lpString=".7z") returned 3
	[0063.014] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0063.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 63
	[0063.014] lstrlenW (lpString=".dbf") returned 4
	[0063.014] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0063.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 63
	[0063.014] lstrlenW (lpString=".1cd") returned 4
	[0063.014] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0063.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 63
	[0063.014] lstrlenW (lpString=".jpg") returned 4
	[0063.014] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0063.014] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.014] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.015] GetLastError () returned 0x0
	[0063.015] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x25ee, lpOverlapped=0x0) returned 1
	[0063.153] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0x25f0, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0x25f0, lpOverlapped=0x0) returned 1
	[0063.154] ReadFile (in: hFile=0x1dc, lpBuffer=0x8480020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7b1fed4, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesRead=0x7b1fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.154] WriteFile (in: hFile=0x1ac, lpBuffer=0x8480020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7b1fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8480020*, lpNumberOfBytesWritten=0x7b1fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.155] SetEndOfFile (hFile=0x1ac) returned 1
	[0063.694] CloseHandle (hObject=0x1ac) returned 1
	[0063.694] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7b1fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.694] SetEndOfFile (hFile=0x1dc) 

Thread:
	id = 13
	os_tid = 0xa44

	[0034.808] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x8160060
	[0034.808] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x8170068
	[0034.809] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0980
	[0034.809] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x6) returned 0x53dd728
	[0034.809] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0998
	[0034.809] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x100000) returned 0x86d0020
	[0034.809] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e09b0
	[0034.809] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e09b0, Size=0x20) returned 0x53c6228
	[0034.809] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e09b0
	[0034.809] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e09b0, Size=0x20) returned 0x53c6200
	[0034.809] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0034.809] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0034.809] Wow64DisableWow64FsRedirection (in: OldValue=0x7c5ff58 | out: OldValue=0x7c5ff58*=0x0) returned 1
	[0034.809] lstrlenW (lpString="kernel32.dll") returned 12
	[0034.809] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6228 | out: hHeap=0x5350000) returned 1
	[0034.809] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0034.809] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53c6200 | out: hHeap=0x5350000) returned 1
	[0034.809] Sleep (dwMilliseconds=0x64) 
	[0035.130] lstrcmpiW (lpString1=".ini", lpString2=".beets") returned 1
	[0035.130] lstrlenW (lpString="desktop.ini") returned 11
	[0035.130] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0035.130] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=129) returned 1
	[0035.130] CloseHandle (hObject=0x168) returned 1
	[0035.130] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 0x26
	[0035.130] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0035.130] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0035.130] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0035.131] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0035.131] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c
	[0035.134] GetLastError () returned 0x0
	[0035.134] ReadFile (in: hFile=0x168, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x81, lpOverlapped=0x0) returned 1
	[0035.147] WriteFile (in: hFile=0x16c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x90, lpOverlapped=0x0) returned 1
	[0035.148] ReadFile (in: hFile=0x168, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0035.148] WriteFile (in: hFile=0x16c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0035.148] SetEndOfFile (hFile=0x16c) returned 1
	[0035.148] CloseHandle (hObject=0x16c) returned 1
	[0035.149] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0035.149] SetEndOfFile (hFile=0x168) returned 1
	[0035.149] CloseHandle (hObject=0x168) returned 1
	[0035.150] SetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x26) returned 1
	[0035.150] DeleteFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 1
	[0035.150] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0035.150] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0035.150] lstrlenW (lpString=".doc") returned 4
	[0035.150] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0035.150] lstrlenW (lpString=".docx") returned 5
	[0035.150] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0035.150] lstrlenW (lpString=".pdf") returned 4
	[0035.150] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0035.150] lstrlenW (lpString=".xls") returned 4
	[0035.150] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0035.150] lstrlenW (lpString=".xlsx") returned 5
	[0035.150] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0035.150] lstrlenW (lpString=".ppt") returned 4
	[0035.150] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0035.151] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0035.151] lstrlenW (lpString=".zip") returned 4
	[0035.151] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0035.151] lstrlenW (lpString=".rar") returned 4
	[0035.151] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0035.151] lstrlenW (lpString=".bz2") returned 4
	[0035.151] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0035.151] lstrlenW (lpString=".7z") returned 3
	[0035.151] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0035.151] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0035.151] lstrlenW (lpString=".dbf") returned 4
	[0035.151] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0035.151] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0035.151] lstrlenW (lpString=".1cd") returned 4
	[0035.151] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0035.151] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0035.151] lstrlenW (lpString=".jpg") returned 4
	[0035.151] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0035.151] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0035.151] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0035.151] lstrlenW (lpString=".doc") returned 4
	[0035.151] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0035.151] lstrlenW (lpString=".docx") returned 5
	[0035.151] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0035.151] lstrlenW (lpString=".pdf") returned 4
	[0035.151] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0035.151] lstrlenW (lpString=".xls") returned 4
	[0035.151] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0035.151] lstrlenW (lpString=".xlsx") returned 5
	[0035.151] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0035.151] lstrlenW (lpString=".ppt") returned 4
	[0035.151] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0035.151] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0035.152] lstrlenW (lpString=".zip") returned 4
	[0035.152] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0035.152] lstrlenW (lpString=".rar") returned 4
	[0035.152] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0035.152] lstrlenW (lpString=".bz2") returned 4
	[0035.152] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0035.152] lstrlenW (lpString=".7z") returned 3
	[0035.152] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0035.152] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0035.152] lstrlenW (lpString=".dbf") returned 4
	[0035.152] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0035.152] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0035.152] lstrlenW (lpString=".1cd") returned 4
	[0035.152] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0035.152] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0035.152] lstrlenW (lpString=".jpg") returned 4
	[0035.152] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0035.152] lstrcmpiW (lpString1=".LOG", lpString2=".beets") returned 1
	[0035.152] lstrlenW (lpString="BCD.LOG") returned 7
	[0035.152] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0035.152] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0035.152] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0035.152] lstrlenW (lpString=".doc") returned 4
	[0035.152] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0035.152] lstrlenW (lpString=".docx") returned 5
	[0035.152] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0035.153] lstrlenW (lpString=".pdf") returned 4
	[0035.153] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1
	[0035.153] lstrlenW (lpString=".xls") returned 4
	[0035.153] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1
	[0035.153] lstrlenW (lpString=".xlsx") returned 5
	[0035.153] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1
	[0035.153] lstrlenW (lpString=".ppt") returned 4
	[0035.153] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1
	[0035.153] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0035.153] lstrlenW (lpString=".zip") returned 4
	[0035.153] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1
	[0035.153] lstrlenW (lpString=".rar") returned 4
	[0035.153] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1
	[0035.153] lstrlenW (lpString=".bz2") returned 4
	[0035.153] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0035.153] lstrlenW (lpString=".7z") returned 3
	[0035.153] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0035.153] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0035.153] lstrlenW (lpString=".dbf") returned 4
	[0035.153] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0035.153] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0035.153] lstrlenW (lpString=".1cd") returned 4
	[0035.153] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0035.153] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0035.153] lstrlenW (lpString=".jpg") returned 4
	[0035.153] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0035.153] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0035.153] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0035.153] lstrlenW (lpString=".doc") returned 4
	[0035.153] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0035.153] lstrlenW (lpString=".docx") returned 5
	[0035.153] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0035.153] lstrlenW (lpString=".pdf") returned 4
	[0035.154] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1
	[0035.154] lstrlenW (lpString=".xls") returned 4
	[0035.154] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1
	[0035.154] lstrlenW (lpString=".xlsx") returned 5
	[0035.154] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1
	[0035.154] lstrlenW (lpString=".ppt") returned 4
	[0035.154] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1
	[0035.154] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0035.154] lstrlenW (lpString=".zip") returned 4
	[0035.154] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1
	[0035.154] lstrlenW (lpString=".rar") returned 4
	[0035.154] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1
	[0035.154] lstrlenW (lpString=".bz2") returned 4
	[0035.154] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0035.154] lstrlenW (lpString=".7z") returned 3
	[0035.154] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0035.154] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0035.154] lstrlenW (lpString=".dbf") returned 4
	[0035.154] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0035.154] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0035.154] lstrlenW (lpString=".1cd") returned 4
	[0035.154] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0035.154] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0035.154] lstrlenW (lpString=".jpg") returned 4
	[0035.155] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0035.155] lstrcmpiW (lpString1=".DAT", lpString2=".beets") returned 1
	[0035.155] lstrlenW (lpString="BOOTSTAT.DAT") returned 12
	[0035.155] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0035.160] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=65536) returned 1
	[0035.160] CloseHandle (hObject=0x168) returned 1
	[0035.160] GetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26
	[0035.160] GetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\bootstat.dat.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0035.160] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0035.160] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0035.161] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0035.161] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\bootstat.dat.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c
	[0035.161] GetLastError () returned 0x0
	[0035.161] ReadFile (in: hFile=0x168, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x10000, lpOverlapped=0x0) returned 1
	[0035.164] WriteFile (in: hFile=0x16c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x10010, lpOverlapped=0x0) returned 1
	[0035.165] ReadFile (in: hFile=0x168, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0035.165] WriteFile (in: hFile=0x16c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0035.166] SetEndOfFile (hFile=0x16c) returned 1
	[0035.166] CloseHandle (hObject=0x16c) returned 1
	[0035.167] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0035.167] SetEndOfFile (hFile=0x168) returned 1
	[0035.168] CloseHandle (hObject=0x168) returned 1
	[0035.168] SetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x26) returned 1
	[0035.169] DeleteFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 1
	[0035.169] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0035.169] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0035.169] lstrlenW (lpString=".doc") returned 4
	[0035.169] lstrcmpiW (lpString1=".doc", lpString2=".DAT") returned 1
	[0035.169] lstrlenW (lpString=".docx") returned 5
	[0035.169] lstrcmpiW (lpString1=".docx", lpString2="T.DAT") returned -1
	[0035.169] lstrlenW (lpString=".pdf") returned 4
	[0035.169] lstrcmpiW (lpString1=".pdf", lpString2=".DAT") returned 1
	[0035.169] lstrlenW (lpString=".xls") returned 4
	[0035.169] lstrcmpiW (lpString1=".xls", lpString2=".DAT") returned 1
	[0035.169] lstrlenW (lpString=".xlsx") returned 5
	[0035.169] lstrcmpiW (lpString1=".xlsx", lpString2="T.DAT") returned -1
	[0035.169] lstrlenW (lpString=".ppt") returned 4
	[0035.169] lstrcmpiW (lpString1=".ppt", lpString2=".DAT") returned 1
	[0035.169] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0035.169] lstrlenW (lpString=".zip") returned 4
	[0035.169] lstrcmpiW (lpString1=".zip", lpString2=".DAT") returned 1
	[0035.169] lstrlenW (lpString=".rar") returned 4
	[0035.169] lstrcmpiW (lpString1=".rar", lpString2=".DAT") returned 1
	[0035.169] lstrlenW (lpString=".bz2") returned 4
	[0035.169] lstrcmpiW (lpString1=".bz2", lpString2=".DAT") returned -1
	[0035.169] lstrlenW (lpString=".7z") returned 3
	[0035.169] lstrcmpiW (lpString1=".7z", lpString2="DAT") returned -1
	[0035.169] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0035.169] lstrlenW (lpString=".dbf") returned 4
	[0035.169] lstrcmpiW (lpString1=".dbf", lpString2=".DAT") returned 1
	[0035.170] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0035.170] lstrlenW (lpString=".1cd") returned 4
	[0035.170] lstrcmpiW (lpString1=".1cd", lpString2=".DAT") returned -1
	[0035.170] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0035.170] lstrlenW (lpString=".jpg") returned 4
	[0035.170] lstrcmpiW (lpString1=".jpg", lpString2=".DAT") returned 1
	[0035.170] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0035.170] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0035.170] lstrlenW (lpString=".doc") returned 4
	[0035.170] lstrcmpiW (lpString1=".doc", lpString2=".DAT") returned 1
	[0035.170] lstrlenW (lpString=".docx") returned 5
	[0035.170] lstrcmpiW (lpString1=".docx", lpString2="T.DAT") returned -1
	[0035.170] lstrlenW (lpString=".pdf") returned 4
	[0035.170] lstrcmpiW (lpString1=".pdf", lpString2=".DAT") returned 1
	[0035.170] lstrlenW (lpString=".xls") returned 4
	[0035.170] lstrcmpiW (lpString1=".xls", lpString2=".DAT") returned 1
	[0035.170] lstrlenW (lpString=".xlsx") returned 5
	[0035.170] lstrcmpiW (lpString1=".xlsx", lpString2="T.DAT") returned -1
	[0035.170] lstrlenW (lpString=".ppt") returned 4
	[0035.171] lstrcmpiW (lpString1=".ppt", lpString2=".DAT") returned 1
	[0035.171] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0035.171] lstrlenW (lpString=".zip") returned 4
	[0035.171] lstrcmpiW (lpString1=".zip", lpString2=".DAT") returned 1
	[0035.171] lstrlenW (lpString=".rar") returned 4
	[0035.171] lstrcmpiW (lpString1=".rar", lpString2=".DAT") returned 1
	[0035.171] lstrlenW (lpString=".bz2") returned 4
	[0035.171] lstrcmpiW (lpString1=".bz2", lpString2=".DAT") returned -1
	[0035.171] lstrlenW (lpString=".7z") returned 3
	[0035.171] lstrcmpiW (lpString1=".7z", lpString2="DAT") returned -1
	[0035.171] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0035.171] lstrlenW (lpString=".dbf") returned 4
	[0035.171] lstrcmpiW (lpString1=".dbf", lpString2=".DAT") returned 1
	[0035.171] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0035.171] lstrlenW (lpString=".1cd") returned 4
	[0035.171] lstrcmpiW (lpString1=".1cd", lpString2=".DAT") returned -1
	[0035.171] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0035.171] lstrlenW (lpString=".jpg") returned 4
	[0035.171] lstrcmpiW (lpString1=".jpg", lpString2=".DAT") returned 1
	[0035.171] Sleep (dwMilliseconds=0x64) 
	[0035.794] lstrcmpiW (lpString1=".BAK", lpString2=".beets") returned -1
	[0035.795] lstrlenW (lpString="BOOTSECT.BAK") returned 12
	[0035.795] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0035.797] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=8192) returned 1
	[0035.797] CloseHandle (hObject=0x168) returned 1
	[0035.797] GetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27
	[0035.797] GetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\bootsect.bak.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0035.797] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1
	[0035.798] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0035.798] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0035.798] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0035.798] CreateFileW (lpFileName="C:\\BOOTSECT.BAK.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\bootsect.bak.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0035.801] GetLastError () returned 0x0
	[0035.801] ReadFile (in: hFile=0x168, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x2000, lpOverlapped=0x0) returned 1
	[0035.815] WriteFile (in: hFile=0x170, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x2010, lpOverlapped=0x0) returned 1
	[0035.817] ReadFile (in: hFile=0x168, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0035.817] WriteFile (in: hFile=0x170, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0035.817] SetEndOfFile (hFile=0x170) returned 1
	[0035.817] CloseHandle (hObject=0x170) returned 1
	[0035.818] SetFilePointerEx (in: hFile=0x168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0035.818] SetEndOfFile (hFile=0x168) returned 1
	[0035.819] CloseHandle (hObject=0x168) returned 1
	[0035.819] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x27) returned 1
	[0035.819] DeleteFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 1
	[0035.819] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.819] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.820] lstrlenW (lpString=".doc") returned 4
	[0035.820] lstrcmpiW (lpString1=".doc", lpString2=".BAK") returned 1
	[0035.820] lstrlenW (lpString=".docx") returned 5
	[0035.820] lstrcmpiW (lpString1=".docx", lpString2="T.BAK") returned -1
	[0035.820] lstrlenW (lpString=".pdf") returned 4
	[0035.820] lstrcmpiW (lpString1=".pdf", lpString2=".BAK") returned 1
	[0035.820] lstrlenW (lpString=".xls") returned 4
	[0035.820] lstrcmpiW (lpString1=".xls", lpString2=".BAK") returned 1
	[0035.820] lstrlenW (lpString=".xlsx") returned 5
	[0035.820] lstrcmpiW (lpString1=".xlsx", lpString2="T.BAK") returned -1
	[0035.820] lstrlenW (lpString=".ppt") returned 4
	[0035.820] lstrcmpiW (lpString1=".ppt", lpString2=".BAK") returned 1
	[0035.820] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.820] lstrlenW (lpString=".zip") returned 4
	[0035.820] lstrcmpiW (lpString1=".zip", lpString2=".BAK") returned 1
	[0035.820] lstrlenW (lpString=".rar") returned 4
	[0035.820] lstrcmpiW (lpString1=".rar", lpString2=".BAK") returned 1
	[0035.820] lstrlenW (lpString=".bz2") returned 4
	[0035.820] lstrcmpiW (lpString1=".bz2", lpString2=".BAK") returned 1
	[0035.820] lstrlenW (lpString=".7z") returned 3
	[0035.820] lstrcmpiW (lpString1=".7z", lpString2="BAK") returned -1
	[0035.820] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.820] lstrlenW (lpString=".dbf") returned 4
	[0035.820] lstrcmpiW (lpString1=".dbf", lpString2=".BAK") returned 1
	[0035.820] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.820] lstrlenW (lpString=".1cd") returned 4
	[0035.820] lstrcmpiW (lpString1=".1cd", lpString2=".BAK") returned -1
	[0035.820] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.820] lstrlenW (lpString=".jpg") returned 4
	[0035.820] lstrcmpiW (lpString1=".jpg", lpString2=".BAK") returned 1
	[0035.820] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.820] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.821] lstrlenW (lpString=".doc") returned 4
	[0035.821] lstrcmpiW (lpString1=".doc", lpString2=".BAK") returned 1
	[0035.821] lstrlenW (lpString=".docx") returned 5
	[0035.821] lstrcmpiW (lpString1=".docx", lpString2="T.BAK") returned -1
	[0035.821] lstrlenW (lpString=".pdf") returned 4
	[0035.821] lstrcmpiW (lpString1=".pdf", lpString2=".BAK") returned 1
	[0035.821] lstrlenW (lpString=".xls") returned 4
	[0035.821] lstrcmpiW (lpString1=".xls", lpString2=".BAK") returned 1
	[0035.821] lstrlenW (lpString=".xlsx") returned 5
	[0035.821] lstrcmpiW (lpString1=".xlsx", lpString2="T.BAK") returned -1
	[0035.821] lstrlenW (lpString=".ppt") returned 4
	[0035.821] lstrcmpiW (lpString1=".ppt", lpString2=".BAK") returned 1
	[0035.821] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.821] lstrlenW (lpString=".zip") returned 4
	[0035.821] lstrcmpiW (lpString1=".zip", lpString2=".BAK") returned 1
	[0035.821] lstrlenW (lpString=".rar") returned 4
	[0035.821] lstrcmpiW (lpString1=".rar", lpString2=".BAK") returned 1
	[0035.821] lstrlenW (lpString=".bz2") returned 4
	[0035.821] lstrcmpiW (lpString1=".bz2", lpString2=".BAK") returned 1
	[0035.821] lstrlenW (lpString=".7z") returned 3
	[0035.821] lstrcmpiW (lpString1=".7z", lpString2="BAK") returned -1
	[0035.821] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.821] lstrlenW (lpString=".dbf") returned 4
	[0035.821] lstrcmpiW (lpString1=".dbf", lpString2=".BAK") returned 1
	[0035.821] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.821] lstrlenW (lpString=".1cd") returned 4
	[0035.821] lstrcmpiW (lpString1=".1cd", lpString2=".BAK") returned -1
	[0035.821] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0035.821] lstrlenW (lpString=".jpg") returned 4
	[0035.821] lstrcmpiW (lpString1=".jpg", lpString2=".BAK") returned 1
	[0035.822] Sleep (dwMilliseconds=0x64) 
	[0036.123] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.123] lstrlenW (lpString="Setup.xml") returned 9
	[0036.123] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.126] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=1608) returned 1
	[0036.126] CloseHandle (hObject=0x19c) returned 1
	[0036.126] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.126] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.126] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.126] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.126] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.126] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0036.127] GetLastError () returned 0x0
	[0036.127] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x648, lpOverlapped=0x0) returned 1
	[0036.128] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x650, lpOverlapped=0x0) returned 1
	[0036.129] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.129] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.129] SetEndOfFile (hFile=0x1a0) returned 1
	[0036.129] CloseHandle (hObject=0x1a0) returned 1
	[0036.130] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.130] SetEndOfFile (hFile=0x19c) returned 1
	[0036.131] CloseHandle (hObject=0x19c) returned 1
	[0036.131] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.131] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.131] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.131] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.131] lstrlenW (lpString=".doc") returned 4
	[0036.132] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.132] lstrlenW (lpString=".docx") returned 5
	[0036.132] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.132] lstrlenW (lpString=".pdf") returned 4
	[0036.132] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.132] lstrlenW (lpString=".xls") returned 4
	[0036.132] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.132] lstrlenW (lpString=".xlsx") returned 5
	[0036.132] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.132] lstrlenW (lpString=".ppt") returned 4
	[0036.132] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.132] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.132] lstrlenW (lpString=".zip") returned 4
	[0036.132] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.132] lstrlenW (lpString=".rar") returned 4
	[0036.132] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.132] lstrlenW (lpString=".bz2") returned 4
	[0036.132] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.132] lstrlenW (lpString=".7z") returned 3
	[0036.132] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.132] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.132] lstrlenW (lpString=".dbf") returned 4
	[0036.132] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.132] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.132] lstrlenW (lpString=".1cd") returned 4
	[0036.132] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.132] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.132] lstrlenW (lpString=".jpg") returned 4
	[0036.132] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.132] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.132] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.132] lstrlenW (lpString=".doc") returned 4
	[0036.132] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.133] lstrlenW (lpString=".docx") returned 5
	[0036.133] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.133] lstrlenW (lpString=".pdf") returned 4
	[0036.133] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.133] lstrlenW (lpString=".xls") returned 4
	[0036.133] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.133] lstrlenW (lpString=".xlsx") returned 5
	[0036.133] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.133] lstrlenW (lpString=".ppt") returned 4
	[0036.133] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.133] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.133] lstrlenW (lpString=".zip") returned 4
	[0036.133] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.133] lstrlenW (lpString=".rar") returned 4
	[0036.133] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.133] lstrlenW (lpString=".bz2") returned 4
	[0036.133] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.133] lstrlenW (lpString=".7z") returned 3
	[0036.133] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.133] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.133] lstrlenW (lpString=".dbf") returned 4
	[0036.133] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.133] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.133] lstrlenW (lpString=".1cd") returned 4
	[0036.133] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.133] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.133] lstrlenW (lpString=".jpg") returned 4
	[0036.133] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.133] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.134] lstrlenW (lpString="OutlookMUI.xml") returned 14
	[0036.134] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.134] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=3186) returned 1
	[0036.134] CloseHandle (hObject=0x19c) returned 1
	[0036.135] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml")) returned 0x2020
	[0036.135] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.135] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.135] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.135] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.135] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0036.135] GetLastError () returned 0x0
	[0036.135] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0xc72, lpOverlapped=0x0) returned 1
	[0036.137] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xc80, lpOverlapped=0x0) returned 1
	[0036.138] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.138] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xf0, lpOverlapped=0x0) returned 1
	[0036.138] SetEndOfFile (hFile=0x1a0) returned 1
	[0036.138] CloseHandle (hObject=0x1a0) returned 1
	[0036.139] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.139] SetEndOfFile (hFile=0x19c) returned 1
	[0036.140] CloseHandle (hObject=0x19c) returned 1
	[0036.140] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.140] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml")) returned 1
	[0036.140] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0036.140] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0036.140] lstrlenW (lpString=".doc") returned 4
	[0036.140] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.141] lstrlenW (lpString=".docx") returned 5
	[0036.141] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.141] lstrlenW (lpString=".pdf") returned 4
	[0036.141] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.141] lstrlenW (lpString=".xls") returned 4
	[0036.141] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.141] lstrlenW (lpString=".xlsx") returned 5
	[0036.141] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.141] lstrlenW (lpString=".ppt") returned 4
	[0036.141] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.141] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0036.141] lstrlenW (lpString=".zip") returned 4
	[0036.141] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.141] lstrlenW (lpString=".rar") returned 4
	[0036.141] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.141] lstrlenW (lpString=".bz2") returned 4
	[0036.141] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.141] lstrlenW (lpString=".7z") returned 3
	[0036.141] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.141] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0036.141] lstrlenW (lpString=".dbf") returned 4
	[0036.141] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.141] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0036.141] lstrlenW (lpString=".1cd") returned 4
	[0036.141] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.141] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0036.141] lstrlenW (lpString=".jpg") returned 4
	[0036.141] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.141] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0036.141] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0036.141] lstrlenW (lpString=".doc") returned 4
	[0036.141] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.142] lstrlenW (lpString=".docx") returned 5
	[0036.142] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.142] lstrlenW (lpString=".pdf") returned 4
	[0036.142] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.142] lstrlenW (lpString=".xls") returned 4
	[0036.142] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.142] lstrlenW (lpString=".xlsx") returned 5
	[0036.142] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.142] lstrlenW (lpString=".ppt") returned 4
	[0036.142] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.142] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0036.142] lstrlenW (lpString=".zip") returned 4
	[0036.142] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.142] lstrlenW (lpString=".rar") returned 4
	[0036.142] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.142] lstrlenW (lpString=".bz2") returned 4
	[0036.142] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.142] lstrlenW (lpString=".7z") returned 3
	[0036.142] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.142] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0036.142] lstrlenW (lpString=".dbf") returned 4
	[0036.142] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.142] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0036.142] lstrlenW (lpString=".1cd") returned 4
	[0036.142] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.142] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 77
	[0036.142] lstrlenW (lpString=".jpg") returned 4
	[0036.142] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.142] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.143] lstrlenW (lpString="Setup.xml") returned 9
	[0036.143] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.143] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=4207) returned 1
	[0036.143] CloseHandle (hObject=0x19c) returned 1
	[0036.143] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.143] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.143] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.143] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.143] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.143] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0036.144] GetLastError () returned 0x0
	[0036.144] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x106f, lpOverlapped=0x0) returned 1
	[0036.145] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x1070, lpOverlapped=0x0) returned 1
	[0036.146] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.146] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.146] SetEndOfFile (hFile=0x1a0) returned 1
	[0036.146] CloseHandle (hObject=0x1a0) returned 1
	[0036.147] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.147] SetEndOfFile (hFile=0x19c) returned 1
	[0036.148] CloseHandle (hObject=0x19c) returned 1
	[0036.148] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.148] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.149] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.149] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.149] lstrlenW (lpString=".doc") returned 4
	[0036.149] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.149] lstrlenW (lpString=".docx") returned 5
	[0036.149] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.149] lstrlenW (lpString=".pdf") returned 4
	[0036.149] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.149] lstrlenW (lpString=".xls") returned 4
	[0036.149] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.149] lstrlenW (lpString=".xlsx") returned 5
	[0036.149] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.149] lstrlenW (lpString=".ppt") returned 4
	[0036.149] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.149] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.149] lstrlenW (lpString=".zip") returned 4
	[0036.149] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.149] lstrlenW (lpString=".rar") returned 4
	[0036.149] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.149] lstrlenW (lpString=".bz2") returned 4
	[0036.149] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.149] lstrlenW (lpString=".7z") returned 3
	[0036.149] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.149] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.149] lstrlenW (lpString=".dbf") returned 4
	[0036.149] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.149] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.149] lstrlenW (lpString=".1cd") returned 4
	[0036.149] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.149] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.149] lstrlenW (lpString=".jpg") returned 4
	[0036.149] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.150] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.150] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.150] lstrlenW (lpString=".doc") returned 4
	[0036.150] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.150] lstrlenW (lpString=".docx") returned 5
	[0036.150] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.150] lstrlenW (lpString=".pdf") returned 4
	[0036.150] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.150] lstrlenW (lpString=".xls") returned 4
	[0036.150] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.150] lstrlenW (lpString=".xlsx") returned 5
	[0036.150] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.150] lstrlenW (lpString=".ppt") returned 4
	[0036.150] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.150] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.150] lstrlenW (lpString=".zip") returned 4
	[0036.150] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.150] lstrlenW (lpString=".rar") returned 4
	[0036.150] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.150] lstrlenW (lpString=".bz2") returned 4
	[0036.150] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.150] lstrlenW (lpString=".7z") returned 3
	[0036.150] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.150] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.150] lstrlenW (lpString=".dbf") returned 4
	[0036.150] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.150] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.150] lstrlenW (lpString=".1cd") returned 4
	[0036.150] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.150] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.150] lstrlenW (lpString=".jpg") returned 4
	[0036.150] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.151] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.151] lstrlenW (lpString="Setup.xml") returned 9
	[0036.151] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.151] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2424) returned 1
	[0036.151] CloseHandle (hObject=0x19c) returned 1
	[0036.151] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.151] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.151] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.151] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.151] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.151] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0036.153] GetLastError () returned 0x0
	[0036.153] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x978, lpOverlapped=0x0) returned 1
	[0036.155] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x980, lpOverlapped=0x0) returned 1
	[0036.156] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.156] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.156] SetEndOfFile (hFile=0x1a0) returned 1
	[0036.156] CloseHandle (hObject=0x1a0) returned 1
	[0036.156] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.157] SetEndOfFile (hFile=0x19c) returned 1
	[0036.157] CloseHandle (hObject=0x19c) returned 1
	[0036.157] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.158] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.158] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.158] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.158] lstrlenW (lpString=".doc") returned 4
	[0036.158] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.158] lstrlenW (lpString=".docx") returned 5
	[0036.158] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.158] lstrlenW (lpString=".pdf") returned 4
	[0036.158] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.158] lstrlenW (lpString=".xls") returned 4
	[0036.158] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.158] lstrlenW (lpString=".xlsx") returned 5
	[0036.158] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.158] lstrlenW (lpString=".ppt") returned 4
	[0036.158] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.158] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.158] lstrlenW (lpString=".zip") returned 4
	[0036.158] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.158] lstrlenW (lpString=".rar") returned 4
	[0036.158] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.158] lstrlenW (lpString=".bz2") returned 4
	[0036.158] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.158] lstrlenW (lpString=".7z") returned 3
	[0036.158] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.158] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.159] lstrlenW (lpString=".dbf") returned 4
	[0036.159] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.159] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.159] lstrlenW (lpString=".1cd") returned 4
	[0036.159] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.159] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.159] lstrlenW (lpString=".jpg") returned 4
	[0036.159] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.159] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.159] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.159] lstrlenW (lpString=".doc") returned 4
	[0036.159] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.159] lstrlenW (lpString=".docx") returned 5
	[0036.159] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.159] lstrlenW (lpString=".pdf") returned 4
	[0036.159] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.159] lstrlenW (lpString=".xls") returned 4
	[0036.159] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.159] lstrlenW (lpString=".xlsx") returned 5
	[0036.159] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.159] lstrlenW (lpString=".ppt") returned 4
	[0036.159] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.159] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.159] lstrlenW (lpString=".zip") returned 4
	[0036.159] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.159] lstrlenW (lpString=".rar") returned 4
	[0036.159] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.159] lstrlenW (lpString=".bz2") returned 4
	[0036.159] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.159] lstrlenW (lpString=".7z") returned 3
	[0036.159] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.159] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.160] lstrlenW (lpString=".dbf") returned 4
	[0036.160] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.160] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.160] lstrlenW (lpString=".1cd") returned 4
	[0036.160] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.160] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.160] lstrlenW (lpString=".jpg") returned 4
	[0036.160] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.160] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.160] lstrlenW (lpString="WordMUI.xml") returned 11
	[0036.160] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.160] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=1800) returned 1
	[0036.160] CloseHandle (hObject=0x19c) returned 1
	[0036.160] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml")) returned 0x2020
	[0036.160] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.161] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.161] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.161] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.161] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0036.161] GetLastError () returned 0x0
	[0036.161] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x708, lpOverlapped=0x0) returned 1
	[0036.326] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x710, lpOverlapped=0x0) returned 1
	[0036.335] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.335] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0036.335] SetEndOfFile (hFile=0x1a0) returned 1
	[0036.335] CloseHandle (hObject=0x1a0) returned 1
	[0036.335] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.336] SetEndOfFile (hFile=0x19c) returned 1
	[0036.336] CloseHandle (hObject=0x19c) returned 1
	[0036.336] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.337] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml")) returned 1
	[0036.337] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74
	[0036.337] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74
	[0036.337] lstrlenW (lpString=".doc") returned 4
	[0036.337] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.337] lstrlenW (lpString=".docx") returned 5
	[0036.337] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.337] lstrlenW (lpString=".pdf") returned 4
	[0036.337] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.337] lstrlenW (lpString=".xls") returned 4
	[0036.337] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.337] lstrlenW (lpString=".xlsx") returned 5
	[0036.337] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.337] lstrlenW (lpString=".ppt") returned 4
	[0036.337] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.337] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74
	[0036.337] lstrlenW (lpString=".zip") returned 4
	[0036.337] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.337] lstrlenW (lpString=".rar") returned 4
	[0036.337] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.337] lstrlenW (lpString=".bz2") returned 4
	[0036.337] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.337] lstrlenW (lpString=".7z") returned 3
	[0036.337] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.337] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74
	[0036.337] lstrlenW (lpString=".dbf") returned 4
	[0036.338] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.338] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74
	[0036.338] lstrlenW (lpString=".1cd") returned 4
	[0036.338] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.338] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74
	[0036.338] lstrlenW (lpString=".jpg") returned 4
	[0036.338] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.338] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74
	[0036.338] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74
	[0036.338] lstrlenW (lpString=".doc") returned 4
	[0036.338] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.338] lstrlenW (lpString=".docx") returned 5
	[0036.338] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.338] lstrlenW (lpString=".pdf") returned 4
	[0036.338] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.338] lstrlenW (lpString=".xls") returned 4
	[0036.338] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.338] lstrlenW (lpString=".xlsx") returned 5
	[0036.338] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.338] lstrlenW (lpString=".ppt") returned 4
	[0036.338] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.338] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74
	[0036.338] lstrlenW (lpString=".zip") returned 4
	[0036.338] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.338] lstrlenW (lpString=".rar") returned 4
	[0036.338] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.338] lstrlenW (lpString=".bz2") returned 4
	[0036.338] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.338] lstrlenW (lpString=".7z") returned 3
	[0036.338] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.338] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74
	[0036.338] lstrlenW (lpString=".dbf") returned 4
	[0036.338] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.339] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74
	[0036.339] lstrlenW (lpString=".1cd") returned 4
	[0036.339] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.339] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 74
	[0036.339] lstrlenW (lpString=".jpg") returned 4
	[0036.339] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.339] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.339] lstrlenW (lpString="InfoPathMUI.xml") returned 15
	[0036.339] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.340] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=1231) returned 1
	[0036.340] CloseHandle (hObject=0x19c) returned 1
	[0036.340] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml")) returned 0x2020
	[0036.340] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.340] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.340] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.340] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.341] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0036.341] GetLastError () returned 0x0
	[0036.341] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x4cf, lpOverlapped=0x0) returned 1
	[0036.342] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x4d0, lpOverlapped=0x0) returned 1
	[0036.343] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.343] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xf2, lpOverlapped=0x0) returned 1
	[0036.343] SetEndOfFile (hFile=0x1a0) returned 1
	[0036.343] CloseHandle (hObject=0x1a0) returned 1
	[0036.344] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.344] SetEndOfFile (hFile=0x19c) returned 1
	[0036.345] CloseHandle (hObject=0x19c) returned 1
	[0036.345] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.345] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml")) returned 1
	[0036.345] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0036.345] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0036.345] lstrlenW (lpString=".doc") returned 4
	[0036.345] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.345] lstrlenW (lpString=".docx") returned 5
	[0036.345] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.345] lstrlenW (lpString=".pdf") returned 4
	[0036.345] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.345] lstrlenW (lpString=".xls") returned 4
	[0036.345] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.346] lstrlenW (lpString=".xlsx") returned 5
	[0036.346] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.346] lstrlenW (lpString=".ppt") returned 4
	[0036.346] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.346] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0036.346] lstrlenW (lpString=".zip") returned 4
	[0036.346] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.346] lstrlenW (lpString=".rar") returned 4
	[0036.346] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.346] lstrlenW (lpString=".bz2") returned 4
	[0036.346] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.346] lstrlenW (lpString=".7z") returned 3
	[0036.346] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.346] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0036.346] lstrlenW (lpString=".dbf") returned 4
	[0036.346] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.346] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0036.346] lstrlenW (lpString=".1cd") returned 4
	[0036.346] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.346] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0036.346] lstrlenW (lpString=".jpg") returned 4
	[0036.346] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.346] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0036.346] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0036.346] lstrlenW (lpString=".doc") returned 4
	[0036.346] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.346] lstrlenW (lpString=".docx") returned 5
	[0036.346] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.346] lstrlenW (lpString=".pdf") returned 4
	[0036.346] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.346] lstrlenW (lpString=".xls") returned 4
	[0036.347] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.347] lstrlenW (lpString=".xlsx") returned 5
	[0036.347] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.347] lstrlenW (lpString=".ppt") returned 4
	[0036.347] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.347] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0036.347] lstrlenW (lpString=".zip") returned 4
	[0036.347] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.347] lstrlenW (lpString=".rar") returned 4
	[0036.347] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.347] lstrlenW (lpString=".bz2") returned 4
	[0036.347] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.347] lstrlenW (lpString=".7z") returned 3
	[0036.347] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.347] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0036.347] lstrlenW (lpString=".dbf") returned 4
	[0036.347] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.347] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0036.347] lstrlenW (lpString=".1cd") returned 4
	[0036.347] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.347] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 78
	[0036.347] lstrlenW (lpString=".jpg") returned 4
	[0036.347] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.347] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.347] lstrlenW (lpString="Setup.xml") returned 9
	[0036.347] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.348] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=1852) returned 1
	[0036.348] CloseHandle (hObject=0x19c) returned 1
	[0036.348] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.348] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.348] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.348] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0036.348] GetLastError () returned 0x0
	[0036.348] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x73c, lpOverlapped=0x0) returned 1
	[0036.350] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x740, lpOverlapped=0x0) returned 1
	[0036.351] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.351] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.351] SetEndOfFile (hFile=0x1a0) returned 1
	[0036.351] CloseHandle (hObject=0x1a0) returned 1
	[0036.352] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.352] SetEndOfFile (hFile=0x19c) returned 1
	[0036.353] CloseHandle (hObject=0x19c) returned 1
	[0036.353] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.353] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.353] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.353] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.353] lstrlenW (lpString=".doc") returned 4
	[0036.353] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.353] lstrlenW (lpString=".docx") returned 5
	[0036.353] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.353] lstrlenW (lpString=".pdf") returned 4
	[0036.353] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.353] lstrlenW (lpString=".xls") returned 4
	[0036.354] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.354] lstrlenW (lpString=".xlsx") returned 5
	[0036.354] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.354] lstrlenW (lpString=".ppt") returned 4
	[0036.354] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.354] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.354] lstrlenW (lpString=".zip") returned 4
	[0036.354] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.354] lstrlenW (lpString=".rar") returned 4
	[0036.354] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.354] lstrlenW (lpString=".bz2") returned 4
	[0036.354] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.354] lstrlenW (lpString=".7z") returned 3
	[0036.354] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.354] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.354] lstrlenW (lpString=".dbf") returned 4
	[0036.354] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.354] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.354] lstrlenW (lpString=".1cd") returned 4
	[0036.354] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.354] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.354] lstrlenW (lpString=".jpg") returned 4
	[0036.354] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.354] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.354] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.354] lstrlenW (lpString=".doc") returned 4
	[0036.354] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.354] lstrlenW (lpString=".docx") returned 5
	[0036.354] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.354] lstrlenW (lpString=".pdf") returned 4
	[0036.354] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.354] lstrlenW (lpString=".xls") returned 4
	[0036.355] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.355] lstrlenW (lpString=".xlsx") returned 5
	[0036.355] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.355] lstrlenW (lpString=".ppt") returned 4
	[0036.355] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.355] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.355] lstrlenW (lpString=".zip") returned 4
	[0036.355] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.355] lstrlenW (lpString=".rar") returned 4
	[0036.355] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.355] lstrlenW (lpString=".bz2") returned 4
	[0036.355] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.355] lstrlenW (lpString=".7z") returned 3
	[0036.355] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.355] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.355] lstrlenW (lpString=".dbf") returned 4
	[0036.355] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.355] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.355] lstrlenW (lpString=".1cd") returned 4
	[0036.355] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.355] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.355] lstrlenW (lpString=".jpg") returned 4
	[0036.355] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.355] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.355] lstrlenW (lpString="Setup.xml") returned 9
	[0036.356] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.356] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=6241) returned 1
	[0036.356] CloseHandle (hObject=0x19c) returned 1
	[0036.357] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.357] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.357] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.357] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.357] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.357] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0036.359] GetLastError () returned 0x0
	[0036.359] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x1861, lpOverlapped=0x0) returned 1
	[0036.395] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x1870, lpOverlapped=0x0) returned 1
	[0036.396] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.396] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.396] SetEndOfFile (hFile=0x1a0) returned 1
	[0036.396] CloseHandle (hObject=0x1a0) returned 1
	[0036.397] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.397] SetEndOfFile (hFile=0x19c) returned 1
	[0036.398] CloseHandle (hObject=0x19c) returned 1
	[0036.398] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.398] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.399] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.399] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.399] lstrlenW (lpString=".doc") returned 4
	[0036.399] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.399] lstrlenW (lpString=".docx") returned 5
	[0036.399] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.399] lstrlenW (lpString=".pdf") returned 4
	[0036.399] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.399] lstrlenW (lpString=".xls") returned 4
	[0036.399] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.399] lstrlenW (lpString=".xlsx") returned 5
	[0036.399] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.399] lstrlenW (lpString=".ppt") returned 4
	[0036.399] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.399] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.399] lstrlenW (lpString=".zip") returned 4
	[0036.399] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.399] lstrlenW (lpString=".rar") returned 4
	[0036.399] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.399] lstrlenW (lpString=".bz2") returned 4
	[0036.399] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.399] lstrlenW (lpString=".7z") returned 3
	[0036.399] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.399] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.399] lstrlenW (lpString=".dbf") returned 4
	[0036.399] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.399] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.399] lstrlenW (lpString=".1cd") returned 4
	[0036.399] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.399] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.399] lstrlenW (lpString=".jpg") returned 4
	[0036.399] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.400] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.400] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.400] lstrlenW (lpString=".doc") returned 4
	[0036.400] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.400] lstrlenW (lpString=".docx") returned 5
	[0036.400] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.400] lstrlenW (lpString=".pdf") returned 4
	[0036.400] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.400] lstrlenW (lpString=".xls") returned 4
	[0036.400] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.400] lstrlenW (lpString=".xlsx") returned 5
	[0036.400] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.400] lstrlenW (lpString=".ppt") returned 4
	[0036.400] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.400] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.400] lstrlenW (lpString=".zip") returned 4
	[0036.400] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.400] lstrlenW (lpString=".rar") returned 4
	[0036.400] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.400] lstrlenW (lpString=".bz2") returned 4
	[0036.400] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.400] lstrlenW (lpString=".7z") returned 3
	[0036.400] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.400] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.400] lstrlenW (lpString=".dbf") returned 4
	[0036.400] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.400] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.400] lstrlenW (lpString=".1cd") returned 4
	[0036.400] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.400] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.400] lstrlenW (lpString=".jpg") returned 4
	[0036.400] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.401] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.401] lstrlenW (lpString="VisioMUI.xml") returned 12
	[0036.401] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.401] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=9503) returned 1
	[0036.401] CloseHandle (hObject=0x19c) returned 1
	[0036.401] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml")) returned 0x2020
	[0036.401] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.401] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.401] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.401] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.401] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0036.402] GetLastError () returned 0x0
	[0036.402] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x251f, lpOverlapped=0x0) returned 1
	[0036.732] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x2520, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x2520, lpOverlapped=0x0) returned 1
	[0036.733] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.733] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0036.733] SetEndOfFile (hFile=0x1a0) returned 1
	[0036.733] CloseHandle (hObject=0x1a0) returned 1
	[0036.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.734] SetEndOfFile (hFile=0x19c) returned 1
	[0036.735] CloseHandle (hObject=0x19c) returned 1
	[0036.735] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.735] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml")) returned 1
	[0036.735] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75
	[0036.735] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75
	[0036.735] lstrlenW (lpString=".doc") returned 4
	[0036.735] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.735] lstrlenW (lpString=".docx") returned 5
	[0036.735] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.735] lstrlenW (lpString=".pdf") returned 4
	[0036.735] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.735] lstrlenW (lpString=".xls") returned 4
	[0036.735] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.735] lstrlenW (lpString=".xlsx") returned 5
	[0036.735] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.735] lstrlenW (lpString=".ppt") returned 4
	[0036.736] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.736] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75
	[0036.736] lstrlenW (lpString=".zip") returned 4
	[0036.736] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.736] lstrlenW (lpString=".rar") returned 4
	[0036.736] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.736] lstrlenW (lpString=".bz2") returned 4
	[0036.736] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.736] lstrlenW (lpString=".7z") returned 3
	[0036.736] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.736] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75
	[0036.736] lstrlenW (lpString=".dbf") returned 4
	[0036.736] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.736] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75
	[0036.736] lstrlenW (lpString=".1cd") returned 4
	[0036.736] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.736] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75
	[0036.736] lstrlenW (lpString=".jpg") returned 4
	[0036.736] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.736] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75
	[0036.736] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75
	[0036.736] lstrlenW (lpString=".doc") returned 4
	[0036.736] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.736] lstrlenW (lpString=".docx") returned 5
	[0036.736] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.736] lstrlenW (lpString=".pdf") returned 4
	[0036.736] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.736] lstrlenW (lpString=".xls") returned 4
	[0036.736] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.736] lstrlenW (lpString=".xlsx") returned 5
	[0036.736] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.736] lstrlenW (lpString=".ppt") returned 4
	[0036.737] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.737] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75
	[0036.737] lstrlenW (lpString=".zip") returned 4
	[0036.737] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.737] lstrlenW (lpString=".rar") returned 4
	[0036.737] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.737] lstrlenW (lpString=".bz2") returned 4
	[0036.737] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.737] lstrlenW (lpString=".7z") returned 3
	[0036.737] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.737] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75
	[0036.737] lstrlenW (lpString=".dbf") returned 4
	[0036.737] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.737] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75
	[0036.737] lstrlenW (lpString=".1cd") returned 4
	[0036.737] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.737] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 75
	[0036.737] lstrlenW (lpString=".jpg") returned 4
	[0036.737] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.737] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.737] lstrlenW (lpString="GrooveMUI.xml") returned 13
	[0036.737] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.739] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=913) returned 1
	[0036.739] CloseHandle (hObject=0x19c) returned 1
	[0036.739] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml")) returned 0x2020
	[0036.739] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.739] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.739] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.739] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.739] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0036.740] GetLastError () returned 0x0
	[0036.740] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x391, lpOverlapped=0x0) returned 1
	[0036.741] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x3a0, lpOverlapped=0x0) returned 1
	[0036.742] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.742] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xee, lpOverlapped=0x0) returned 1
	[0036.742] SetEndOfFile (hFile=0x1a0) returned 1
	[0036.742] CloseHandle (hObject=0x1a0) returned 1
	[0036.743] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.743] SetEndOfFile (hFile=0x19c) returned 1
	[0036.744] CloseHandle (hObject=0x19c) returned 1
	[0036.744] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.744] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml")) returned 1
	[0036.744] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0036.744] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0036.744] lstrlenW (lpString=".doc") returned 4
	[0036.744] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.744] lstrlenW (lpString=".docx") returned 5
	[0036.744] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.744] lstrlenW (lpString=".pdf") returned 4
	[0036.745] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.745] lstrlenW (lpString=".xls") returned 4
	[0036.745] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.745] lstrlenW (lpString=".xlsx") returned 5
	[0036.745] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.745] lstrlenW (lpString=".ppt") returned 4
	[0036.745] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.745] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0036.745] lstrlenW (lpString=".zip") returned 4
	[0036.745] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.745] lstrlenW (lpString=".rar") returned 4
	[0036.745] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.745] lstrlenW (lpString=".bz2") returned 4
	[0036.745] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.745] lstrlenW (lpString=".7z") returned 3
	[0036.745] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.745] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0036.745] lstrlenW (lpString=".dbf") returned 4
	[0036.745] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.745] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0036.745] lstrlenW (lpString=".1cd") returned 4
	[0036.745] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.745] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0036.745] lstrlenW (lpString=".jpg") returned 4
	[0036.745] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.745] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0036.745] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0036.745] lstrlenW (lpString=".doc") returned 4
	[0036.745] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.748] lstrlenW (lpString=".docx") returned 5
	[0036.748] lstrcmpiW (lpString1=".docx", lpString2="I.xml") returned -1
	[0036.748] lstrlenW (lpString=".pdf") returned 4
	[0036.748] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.748] lstrlenW (lpString=".xls") returned 4
	[0036.748] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.748] lstrlenW (lpString=".xlsx") returned 5
	[0036.748] lstrcmpiW (lpString1=".xlsx", lpString2="I.xml") returned -1
	[0036.748] lstrlenW (lpString=".ppt") returned 4
	[0036.748] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.748] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0036.748] lstrlenW (lpString=".zip") returned 4
	[0036.749] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.749] lstrlenW (lpString=".rar") returned 4
	[0036.749] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.749] lstrlenW (lpString=".bz2") returned 4
	[0036.749] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.749] lstrlenW (lpString=".7z") returned 3
	[0036.749] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.749] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0036.749] lstrlenW (lpString=".dbf") returned 4
	[0036.749] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.749] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0036.749] lstrlenW (lpString=".1cd") returned 4
	[0036.749] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.749] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 76
	[0036.749] lstrlenW (lpString=".jpg") returned 4
	[0036.749] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.749] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.749] lstrlenW (lpString="Setup.xml") returned 9
	[0036.749] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.749] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=1452) returned 1
	[0036.749] CloseHandle (hObject=0x19c) returned 1
	[0036.750] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0036.750] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.750] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.750] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.750] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.750] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0036.750] GetLastError () returned 0x0
	[0036.750] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x5ac, lpOverlapped=0x0) returned 1
	[0036.752] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x5b0, lpOverlapped=0x0) returned 1
	[0036.753] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0036.753] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0036.753] SetEndOfFile (hFile=0x1a0) returned 1
	[0036.753] CloseHandle (hObject=0x1a0) returned 1
	[0036.753] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.753] SetEndOfFile (hFile=0x19c) returned 1
	[0036.754] CloseHandle (hObject=0x19c) returned 1
	[0036.754] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0036.754] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0036.755] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.755] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.755] lstrlenW (lpString=".doc") returned 4
	[0036.755] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.755] lstrlenW (lpString=".docx") returned 5
	[0036.755] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.755] lstrlenW (lpString=".pdf") returned 4
	[0036.755] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.755] lstrlenW (lpString=".xls") returned 4
	[0036.755] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.755] lstrlenW (lpString=".xlsx") returned 5
	[0036.755] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.755] lstrlenW (lpString=".ppt") returned 4
	[0036.755] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.755] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.755] lstrlenW (lpString=".zip") returned 4
	[0036.755] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.755] lstrlenW (lpString=".rar") returned 4
	[0036.755] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.755] lstrlenW (lpString=".bz2") returned 4
	[0036.755] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.755] lstrlenW (lpString=".7z") returned 3
	[0036.755] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.755] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.755] lstrlenW (lpString=".dbf") returned 4
	[0036.755] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.755] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.755] lstrlenW (lpString=".1cd") returned 4
	[0036.755] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.755] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.756] lstrlenW (lpString=".jpg") returned 4
	[0036.756] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.756] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.756] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.756] lstrlenW (lpString=".doc") returned 4
	[0036.756] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0036.756] lstrlenW (lpString=".docx") returned 5
	[0036.756] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0036.756] lstrlenW (lpString=".pdf") returned 4
	[0036.756] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0036.756] lstrlenW (lpString=".xls") returned 4
	[0036.756] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0036.756] lstrlenW (lpString=".xlsx") returned 5
	[0036.756] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0036.756] lstrlenW (lpString=".ppt") returned 4
	[0036.756] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0036.756] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.756] lstrlenW (lpString=".zip") returned 4
	[0036.756] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0036.756] lstrlenW (lpString=".rar") returned 4
	[0036.756] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0036.756] lstrlenW (lpString=".bz2") returned 4
	[0036.756] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0036.756] lstrlenW (lpString=".7z") returned 3
	[0036.756] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0036.756] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.756] lstrlenW (lpString=".dbf") returned 4
	[0036.756] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0036.756] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.756] lstrlenW (lpString=".1cd") returned 4
	[0036.756] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0036.756] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0036.757] lstrlenW (lpString=".jpg") returned 4
	[0036.757] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0036.757] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0036.757] lstrlenW (lpString="branding.xml") returned 12
	[0036.757] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.758] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=596341) returned 1
	[0036.758] CloseHandle (hObject=0x19c) returned 1
	[0036.758] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml")) returned 0x2020
	[0036.758] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.758] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0036.758] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.758] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.758] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0036.758] GetLastError () returned 0x0
	[0036.758] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x91975, lpOverlapped=0x0) returned 1
	[0036.773] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x91980, lpOverlapped=0x0) returned 1
	[0037.399] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0037.399] WriteFile (in: hFile=0x1a0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0037.399] SetEndOfFile (hFile=0x1a0) returned 1
	[0037.399] CloseHandle (hObject=0x1a0) returned 1
	[0037.406] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.406] SetEndOfFile (hFile=0x19c) returned 1
	[0037.411] CloseHandle (hObject=0x19c) returned 1
	[0037.411] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0037.412] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml")) returned 1
	[0037.412] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0037.412] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0037.412] lstrlenW (lpString=".doc") returned 4
	[0037.412] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.412] lstrlenW (lpString=".docx") returned 5
	[0037.412] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1
	[0037.412] lstrlenW (lpString=".pdf") returned 4
	[0037.412] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.412] lstrlenW (lpString=".xls") returned 4
	[0037.412] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.412] lstrlenW (lpString=".xlsx") returned 5
	[0037.412] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1
	[0037.412] lstrlenW (lpString=".ppt") returned 4
	[0037.412] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.412] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0037.412] lstrlenW (lpString=".zip") returned 4
	[0037.412] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.412] lstrlenW (lpString=".rar") returned 4
	[0037.412] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.412] lstrlenW (lpString=".bz2") returned 4
	[0037.412] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.412] lstrlenW (lpString=".7z") returned 3
	[0037.413] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.413] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0037.413] lstrlenW (lpString=".dbf") returned 4
	[0037.413] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.413] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0037.413] lstrlenW (lpString=".1cd") returned 4
	[0037.413] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.413] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0037.413] lstrlenW (lpString=".jpg") returned 4
	[0037.413] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.413] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0037.413] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0037.413] lstrlenW (lpString=".doc") returned 4
	[0037.413] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0037.413] lstrlenW (lpString=".docx") returned 5
	[0037.413] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1
	[0037.413] lstrlenW (lpString=".pdf") returned 4
	[0037.413] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0037.413] lstrlenW (lpString=".xls") returned 4
	[0037.413] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0037.413] lstrlenW (lpString=".xlsx") returned 5
	[0037.413] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1
	[0037.413] lstrlenW (lpString=".ppt") returned 4
	[0037.413] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0037.413] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0037.413] lstrlenW (lpString=".zip") returned 4
	[0037.413] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0037.413] lstrlenW (lpString=".rar") returned 4
	[0037.413] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0037.413] lstrlenW (lpString=".bz2") returned 4
	[0037.413] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0037.413] lstrlenW (lpString=".7z") returned 3
	[0037.413] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0037.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0037.414] lstrlenW (lpString=".dbf") returned 4
	[0037.414] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0037.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0037.414] lstrlenW (lpString=".1cd") returned 4
	[0037.414] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0037.414] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 75
	[0037.414] lstrlenW (lpString=".jpg") returned 4
	[0037.414] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0037.414] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0037.414] lstrlenW (lpString="Setup.xml") returned 9
	[0037.414] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc
	[0037.521] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2624) returned 1
	[0037.521] CloseHandle (hObject=0x1cc) returned 1
	[0037.521] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0037.521] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0037.521] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc
	[0037.521] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.521] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.521] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x188
	[0037.522] GetLastError () returned 0x0
	[0037.522] ReadFile (in: hFile=0x1cc, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0xa40, lpOverlapped=0x0) returned 1
	[0037.651] WriteFile (in: hFile=0x188, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xa50, lpOverlapped=0x0) returned 1
	[0038.285] ReadFile (in: hFile=0x1cc, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0038.285] WriteFile (in: hFile=0x188, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0038.285] SetEndOfFile (hFile=0x188) returned 1
	[0038.285] CloseHandle (hObject=0x188) returned 1
	[0038.286] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.286] SetEndOfFile (hFile=0x1cc) returned 1
	[0038.287] CloseHandle (hObject=0x1cc) returned 1
	[0038.287] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0038.287] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0038.288] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.288] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.288] lstrlenW (lpString=".doc") returned 4
	[0038.288] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.288] lstrlenW (lpString=".docx") returned 5
	[0038.288] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0038.288] lstrlenW (lpString=".pdf") returned 4
	[0038.288] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.288] lstrlenW (lpString=".xls") returned 4
	[0038.288] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.288] lstrlenW (lpString=".xlsx") returned 5
	[0038.288] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0038.288] lstrlenW (lpString=".ppt") returned 4
	[0038.288] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.288] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.288] lstrlenW (lpString=".zip") returned 4
	[0038.288] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.288] lstrlenW (lpString=".rar") returned 4
	[0038.288] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.288] lstrlenW (lpString=".bz2") returned 4
	[0038.288] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.288] lstrlenW (lpString=".7z") returned 3
	[0038.288] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.288] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.289] lstrlenW (lpString=".dbf") returned 4
	[0038.289] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.289] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.289] lstrlenW (lpString=".1cd") returned 4
	[0038.289] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.289] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.289] lstrlenW (lpString=".jpg") returned 4
	[0038.289] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.289] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.289] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.289] lstrlenW (lpString=".doc") returned 4
	[0038.289] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0038.289] lstrlenW (lpString=".docx") returned 5
	[0038.289] lstrcmpiW (lpString1=".docx", lpString2="p.xml") returned -1
	[0038.289] lstrlenW (lpString=".pdf") returned 4
	[0038.289] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0038.289] lstrlenW (lpString=".xls") returned 4
	[0038.289] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0038.289] lstrlenW (lpString=".xlsx") returned 5
	[0038.289] lstrcmpiW (lpString1=".xlsx", lpString2="p.xml") returned -1
	[0038.289] lstrlenW (lpString=".ppt") returned 4
	[0038.289] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0038.289] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.289] lstrlenW (lpString=".zip") returned 4
	[0038.289] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0038.289] lstrlenW (lpString=".rar") returned 4
	[0038.289] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0038.290] lstrlenW (lpString=".bz2") returned 4
	[0038.290] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0038.290] lstrlenW (lpString=".7z") returned 3
	[0038.290] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0038.290] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.290] lstrlenW (lpString=".dbf") returned 4
	[0038.290] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0038.290] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.290] lstrlenW (lpString=".1cd") returned 4
	[0038.290] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0038.290] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 72
	[0038.290] lstrlenW (lpString=".jpg") returned 4
	[0038.290] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0038.290] lstrcmpiW (lpString1=".avi", lpString2=".beets") returned -1
	[0038.290] lstrlenW (lpString="boxed-join.avi") returned 14
	[0038.290] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0039.165] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=33280) returned 1
	[0039.165] CloseHandle (hObject=0x19c) returned 1
	[0039.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20
	[0039.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.165] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0039.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0039.165] lstrlenW (lpString=".doc") returned 4
	[0039.165] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.166] lstrlenW (lpString=".docx") returned 5
	[0039.166] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0039.166] lstrlenW (lpString=".pdf") returned 4
	[0039.166] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.166] lstrlenW (lpString=".xls") returned 4
	[0039.166] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.166] lstrlenW (lpString=".xlsx") returned 5
	[0039.166] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0039.166] lstrlenW (lpString=".ppt") returned 4
	[0039.166] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0039.166] lstrlenW (lpString=".zip") returned 4
	[0039.166] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.166] lstrlenW (lpString=".rar") returned 4
	[0039.166] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.166] lstrlenW (lpString=".bz2") returned 4
	[0039.166] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.166] lstrlenW (lpString=".7z") returned 3
	[0039.166] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0039.166] lstrlenW (lpString=".dbf") returned 4
	[0039.166] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0039.166] lstrlenW (lpString=".1cd") returned 4
	[0039.166] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0039.166] lstrlenW (lpString=".jpg") returned 4
	[0039.166] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0039.166] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0039.166] lstrlenW (lpString=".doc") returned 4
	[0039.167] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0039.167] lstrlenW (lpString=".docx") returned 5
	[0039.167] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0039.167] lstrlenW (lpString=".pdf") returned 4
	[0039.167] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0039.167] lstrlenW (lpString=".xls") returned 4
	[0039.167] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0039.167] lstrlenW (lpString=".xlsx") returned 5
	[0039.167] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0039.167] lstrlenW (lpString=".ppt") returned 4
	[0039.167] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0039.167] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0039.167] lstrlenW (lpString=".zip") returned 4
	[0039.167] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0039.167] lstrlenW (lpString=".rar") returned 4
	[0039.167] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0039.167] lstrlenW (lpString=".bz2") returned 4
	[0039.167] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0039.167] lstrlenW (lpString=".7z") returned 3
	[0039.167] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0039.167] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0039.167] lstrlenW (lpString=".dbf") returned 4
	[0039.167] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0039.167] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0039.167] lstrlenW (lpString=".1cd") returned 4
	[0039.167] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0039.167] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0039.167] lstrlenW (lpString=".jpg") returned 4
	[0039.167] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0039.168] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0039.168] lstrlenW (lpString="ipsjpn.xml") returned 10
	[0039.168] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0039.398] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2522) returned 1
	[0039.398] CloseHandle (hObject=0x1e4) returned 1
	[0039.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20
	[0039.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.399] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.399] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml") returned 61
	[0039.399] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml") returned 61
	[0039.399] lstrlenW (lpString=".doc") returned 4
	[0039.399] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.399] lstrlenW (lpString=".docx") returned 5
	[0039.399] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1
	[0039.399] lstrlenW (lpString=".pdf") returned 4
	[0039.399] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.399] lstrlenW (lpString=".xls") returned 4
	[0039.399] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.399] lstrlenW (lpString=".xlsx") returned 5
	[0039.399] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1
	[0039.399] lstrlenW (lpString=".ppt") returned 4
	[0039.399] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.399] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml") returned 61
	[0039.399] lstrlenW (lpString=".zip") returned 4
	[0039.399] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.399] lstrlenW (lpString=".rar") returned 4
	[0039.399] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.399] lstrlenW (lpString=".bz2") returned 4
	[0039.399] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.399] lstrlenW (lpString=".7z") returned 3
	[0039.400] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.400] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml") returned 61
	[0039.400] lstrlenW (lpString=".dbf") returned 4
	[0039.400] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.400] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml") returned 61
	[0039.400] lstrlenW (lpString=".1cd") returned 4
	[0039.400] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.400] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml") returned 61
	[0039.400] lstrlenW (lpString=".jpg") returned 4
	[0039.400] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.400] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml") returned 61
	[0039.400] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml") returned 61
	[0039.400] lstrlenW (lpString=".doc") returned 4
	[0039.400] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.400] lstrlenW (lpString=".docx") returned 5
	[0039.400] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1
	[0039.400] lstrlenW (lpString=".pdf") returned 4
	[0039.400] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.400] lstrlenW (lpString=".xls") returned 4
	[0039.400] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.400] lstrlenW (lpString=".xlsx") returned 5
	[0039.400] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1
	[0039.400] lstrlenW (lpString=".ppt") returned 4
	[0039.400] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.400] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml") returned 61
	[0039.400] lstrlenW (lpString=".zip") returned 4
	[0039.400] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.400] lstrlenW (lpString=".rar") returned 4
	[0039.400] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.400] lstrlenW (lpString=".bz2") returned 4
	[0039.400] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.400] lstrlenW (lpString=".7z") returned 3
	[0039.400] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.401] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml") returned 61
	[0039.401] lstrlenW (lpString=".dbf") returned 4
	[0039.401] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.401] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml") returned 61
	[0039.401] lstrlenW (lpString=".1cd") returned 4
	[0039.401] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.401] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml") returned 61
	[0039.401] lstrlenW (lpString=".jpg") returned 4
	[0039.401] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.401] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0039.401] lstrlenW (lpString="ipskor.xml") returned 10
	[0039.401] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0039.402] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2568) returned 1
	[0039.402] CloseHandle (hObject=0x1e4) returned 1
	[0039.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20
	[0039.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.402] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml") returned 61
	[0039.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml") returned 61
	[0039.402] lstrlenW (lpString=".doc") returned 4
	[0039.402] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.402] lstrlenW (lpString=".docx") returned 5
	[0039.402] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0039.403] lstrlenW (lpString=".pdf") returned 4
	[0039.403] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.403] lstrlenW (lpString=".xls") returned 4
	[0039.403] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.403] lstrlenW (lpString=".xlsx") returned 5
	[0039.403] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1
	[0039.403] lstrlenW (lpString=".ppt") returned 4
	[0039.403] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml") returned 61
	[0039.403] lstrlenW (lpString=".zip") returned 4
	[0039.403] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.403] lstrlenW (lpString=".rar") returned 4
	[0039.403] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.403] lstrlenW (lpString=".bz2") returned 4
	[0039.403] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.403] lstrlenW (lpString=".7z") returned 3
	[0039.403] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml") returned 61
	[0039.403] lstrlenW (lpString=".dbf") returned 4
	[0039.403] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml") returned 61
	[0039.403] lstrlenW (lpString=".1cd") returned 4
	[0039.403] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml") returned 61
	[0039.403] lstrlenW (lpString=".jpg") returned 4
	[0039.403] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml") returned 61
	[0039.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml") returned 61
	[0039.403] lstrlenW (lpString=".doc") returned 4
	[0039.403] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.403] lstrlenW (lpString=".docx") returned 5
	[0039.403] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0039.404] lstrlenW (lpString=".pdf") returned 4
	[0039.404] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.404] lstrlenW (lpString=".xls") returned 4
	[0039.404] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.404] lstrlenW (lpString=".xlsx") returned 5
	[0039.404] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1
	[0039.404] lstrlenW (lpString=".ppt") returned 4
	[0039.404] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml") returned 61
	[0039.404] lstrlenW (lpString=".zip") returned 4
	[0039.404] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.404] lstrlenW (lpString=".rar") returned 4
	[0039.404] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.404] lstrlenW (lpString=".bz2") returned 4
	[0039.404] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.404] lstrlenW (lpString=".7z") returned 3
	[0039.404] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml") returned 61
	[0039.404] lstrlenW (lpString=".dbf") returned 4
	[0039.404] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml") returned 61
	[0039.404] lstrlenW (lpString=".1cd") returned 4
	[0039.404] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml") returned 61
	[0039.404] lstrlenW (lpString=".jpg") returned 4
	[0039.404] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.404] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0039.404] lstrlenW (lpString="ipsnld.xml") returned 10
	[0039.404] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0039.405] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2626) returned 1
	[0039.405] CloseHandle (hObject=0x1e4) returned 1
	[0039.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20
	[0039.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.405] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml") returned 61
	[0039.405] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml") returned 61
	[0039.405] lstrlenW (lpString=".doc") returned 4
	[0039.405] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.405] lstrlenW (lpString=".docx") returned 5
	[0039.405] lstrcmpiW (lpString1=".docx", lpString2="d.xml") returned -1
	[0039.405] lstrlenW (lpString=".pdf") returned 4
	[0039.405] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.405] lstrlenW (lpString=".xls") returned 4
	[0039.405] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.405] lstrlenW (lpString=".xlsx") returned 5
	[0039.405] lstrcmpiW (lpString1=".xlsx", lpString2="d.xml") returned -1
	[0039.405] lstrlenW (lpString=".ppt") returned 4
	[0039.405] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml") returned 61
	[0039.406] lstrlenW (lpString=".zip") returned 4
	[0039.406] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.406] lstrlenW (lpString=".rar") returned 4
	[0039.406] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.406] lstrlenW (lpString=".bz2") returned 4
	[0039.406] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.406] lstrlenW (lpString=".7z") returned 3
	[0039.406] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml") returned 61
	[0039.406] lstrlenW (lpString=".dbf") returned 4
	[0039.406] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml") returned 61
	[0039.406] lstrlenW (lpString=".1cd") returned 4
	[0039.406] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml") returned 61
	[0039.406] lstrlenW (lpString=".jpg") returned 4
	[0039.406] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml") returned 61
	[0039.406] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml") returned 61
	[0039.406] lstrlenW (lpString=".doc") returned 4
	[0039.406] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.406] lstrlenW (lpString=".docx") returned 5
	[0039.406] lstrcmpiW (lpString1=".docx", lpString2="d.xml") returned -1
	[0039.406] lstrlenW (lpString=".pdf") returned 4
	[0039.406] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.406] lstrlenW (lpString=".xls") returned 4
	[0039.406] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.406] lstrlenW (lpString=".xlsx") returned 5
	[0039.406] lstrcmpiW (lpString1=".xlsx", lpString2="d.xml") returned -1
	[0039.406] lstrlenW (lpString=".ppt") returned 4
	[0039.406] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml") returned 61
	[0039.407] lstrlenW (lpString=".zip") returned 4
	[0039.407] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.407] lstrlenW (lpString=".rar") returned 4
	[0039.407] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.407] lstrlenW (lpString=".bz2") returned 4
	[0039.407] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.407] lstrlenW (lpString=".7z") returned 3
	[0039.407] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml") returned 61
	[0039.407] lstrlenW (lpString=".dbf") returned 4
	[0039.407] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml") returned 61
	[0039.407] lstrlenW (lpString=".1cd") returned 4
	[0039.407] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.407] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml") returned 61
	[0039.407] lstrlenW (lpString=".jpg") returned 4
	[0039.407] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.407] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0039.407] lstrlenW (lpString="ipsnor.xml") returned 10
	[0039.407] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0039.408] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2580) returned 1
	[0039.408] CloseHandle (hObject=0x1e4) returned 1
	[0039.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20
	[0039.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.408] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.408] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml") returned 61
	[0039.408] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml") returned 61
	[0039.408] lstrlenW (lpString=".doc") returned 4
	[0039.408] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.408] lstrlenW (lpString=".docx") returned 5
	[0039.408] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0039.408] lstrlenW (lpString=".pdf") returned 4
	[0039.408] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.408] lstrlenW (lpString=".xls") returned 4
	[0039.408] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.408] lstrlenW (lpString=".xlsx") returned 5
	[0039.408] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1
	[0039.408] lstrlenW (lpString=".ppt") returned 4
	[0039.408] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.408] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml") returned 61
	[0039.408] lstrlenW (lpString=".zip") returned 4
	[0039.408] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.408] lstrlenW (lpString=".rar") returned 4
	[0039.408] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.408] lstrlenW (lpString=".bz2") returned 4
	[0039.408] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.408] lstrlenW (lpString=".7z") returned 3
	[0039.409] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml") returned 61
	[0039.409] lstrlenW (lpString=".dbf") returned 4
	[0039.409] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml") returned 61
	[0039.409] lstrlenW (lpString=".1cd") returned 4
	[0039.409] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml") returned 61
	[0039.409] lstrlenW (lpString=".jpg") returned 4
	[0039.409] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml") returned 61
	[0039.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml") returned 61
	[0039.409] lstrlenW (lpString=".doc") returned 4
	[0039.409] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.409] lstrlenW (lpString=".docx") returned 5
	[0039.409] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0039.409] lstrlenW (lpString=".pdf") returned 4
	[0039.409] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.409] lstrlenW (lpString=".xls") returned 4
	[0039.409] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.409] lstrlenW (lpString=".xlsx") returned 5
	[0039.409] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1
	[0039.409] lstrlenW (lpString=".ppt") returned 4
	[0039.409] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.409] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml") returned 61
	[0039.409] lstrlenW (lpString=".zip") returned 4
	[0039.409] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.409] lstrlenW (lpString=".rar") returned 4
	[0039.409] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.409] lstrlenW (lpString=".bz2") returned 4
	[0039.409] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.409] lstrlenW (lpString=".7z") returned 3
	[0039.409] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml") returned 61
	[0039.410] lstrlenW (lpString=".dbf") returned 4
	[0039.410] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml") returned 61
	[0039.410] lstrlenW (lpString=".1cd") returned 4
	[0039.410] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml") returned 61
	[0039.410] lstrlenW (lpString=".jpg") returned 4
	[0039.410] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.410] lstrcmpiW (lpString1=".xml", lpString2=".beets") returned 1
	[0039.410] lstrlenW (lpString="ipsplk.xml") returned 10
	[0039.410] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0039.465] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2600) returned 1
	[0039.465] CloseHandle (hObject=0x1e8) returned 1
	[0039.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20
	[0039.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.465] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0039.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml") returned 61
	[0039.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml") returned 61
	[0039.465] lstrlenW (lpString=".doc") returned 4
	[0039.465] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.465] lstrlenW (lpString=".docx") returned 5
	[0039.465] lstrcmpiW (lpString1=".docx", lpString2="k.xml") returned -1
	[0039.465] lstrlenW (lpString=".pdf") returned 4
	[0039.465] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.465] lstrlenW (lpString=".xls") returned 4
	[0039.465] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.465] lstrlenW (lpString=".xlsx") returned 5
	[0039.465] lstrcmpiW (lpString1=".xlsx", lpString2="k.xml") returned -1
	[0039.465] lstrlenW (lpString=".ppt") returned 4
	[0039.465] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml") returned 61
	[0039.466] lstrlenW (lpString=".zip") returned 4
	[0039.466] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.466] lstrlenW (lpString=".rar") returned 4
	[0039.466] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.466] lstrlenW (lpString=".bz2") returned 4
	[0039.466] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.466] lstrlenW (lpString=".7z") returned 3
	[0039.466] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml") returned 61
	[0039.466] lstrlenW (lpString=".dbf") returned 4
	[0039.466] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml") returned 61
	[0039.466] lstrlenW (lpString=".1cd") returned 4
	[0039.466] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml") returned 61
	[0039.466] lstrlenW (lpString=".jpg") returned 4
	[0039.466] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml") returned 61
	[0039.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml") returned 61
	[0039.466] lstrlenW (lpString=".doc") returned 4
	[0039.466] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0039.466] lstrlenW (lpString=".docx") returned 5
	[0039.466] lstrcmpiW (lpString1=".docx", lpString2="k.xml") returned -1
	[0039.466] lstrlenW (lpString=".pdf") returned 4
	[0039.466] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0039.466] lstrlenW (lpString=".xls") returned 4
	[0039.466] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0039.466] lstrlenW (lpString=".xlsx") returned 5
	[0039.466] lstrcmpiW (lpString1=".xlsx", lpString2="k.xml") returned -1
	[0039.466] lstrlenW (lpString=".ppt") returned 4
	[0039.466] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0039.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml") returned 61
	[0039.467] lstrlenW (lpString=".zip") returned 4
	[0039.467] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0039.467] lstrlenW (lpString=".rar") returned 4
	[0039.467] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0039.467] lstrlenW (lpString=".bz2") returned 4
	[0039.467] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0039.467] lstrlenW (lpString=".7z") returned 3
	[0039.467] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0039.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml") returned 61
	[0039.467] lstrlenW (lpString=".dbf") returned 4
	[0039.467] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0039.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml") returned 61
	[0039.467] lstrlenW (lpString=".1cd") returned 4
	[0039.467] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0039.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml") returned 61
	[0039.467] lstrlenW (lpString=".jpg") returned 4
	[0039.467] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0039.467] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0039.467] lstrlenW (lpString="AccessMUI.XML") returned 13
	[0039.467] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0039.468] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=1349) returned 1
	[0039.468] CloseHandle (hObject=0x1e8) returned 1
	[0039.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml")) returned 0x20
	[0039.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.468] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0039.468] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.468] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.469] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0039.469] GetLastError () returned 0x0
	[0039.469] ReadFile (in: hFile=0x1e8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x545, lpOverlapped=0x0) returned 1
	[0039.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x550, lpOverlapped=0x0) returned 1
	[0039.475] ReadFile (in: hFile=0x1e8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0039.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xee, lpOverlapped=0x0) returned 1
	[0039.475] SetEndOfFile (hFile=0x1ec) returned 1
	[0039.476] CloseHandle (hObject=0x1ec) returned 1
	[0039.476] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.476] SetEndOfFile (hFile=0x1e8) returned 1
	[0039.477] CloseHandle (hObject=0x1e8) returned 1
	[0039.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0039.477] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml")) returned 1
	[0039.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0039.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0039.478] lstrlenW (lpString=".doc") returned 4
	[0039.478] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0039.478] lstrlenW (lpString=".docx") returned 5
	[0039.478] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0039.478] lstrlenW (lpString=".pdf") returned 4
	[0039.478] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0039.478] lstrlenW (lpString=".xls") returned 4
	[0039.478] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0039.478] lstrlenW (lpString=".xlsx") returned 5
	[0039.478] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0039.478] lstrlenW (lpString=".ppt") returned 4
	[0039.478] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0039.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0039.478] lstrlenW (lpString=".zip") returned 4
	[0039.478] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0039.478] lstrlenW (lpString=".rar") returned 4
	[0039.478] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0039.478] lstrlenW (lpString=".bz2") returned 4
	[0039.478] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0039.478] lstrlenW (lpString=".7z") returned 3
	[0039.478] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0039.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0039.478] lstrlenW (lpString=".dbf") returned 4
	[0039.478] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0039.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0039.478] lstrlenW (lpString=".1cd") returned 4
	[0039.478] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0039.478] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0039.478] lstrlenW (lpString=".jpg") returned 4
	[0039.479] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0039.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0039.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0039.479] lstrlenW (lpString=".doc") returned 4
	[0039.479] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0039.479] lstrlenW (lpString=".docx") returned 5
	[0039.479] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0039.479] lstrlenW (lpString=".pdf") returned 4
	[0039.479] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0039.479] lstrlenW (lpString=".xls") returned 4
	[0039.479] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0039.479] lstrlenW (lpString=".xlsx") returned 5
	[0039.479] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0039.479] lstrlenW (lpString=".ppt") returned 4
	[0039.479] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0039.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0039.479] lstrlenW (lpString=".zip") returned 4
	[0039.479] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0039.479] lstrlenW (lpString=".rar") returned 4
	[0039.479] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0039.479] lstrlenW (lpString=".bz2") returned 4
	[0039.479] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0039.479] lstrlenW (lpString=".7z") returned 3
	[0039.479] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0039.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0039.479] lstrlenW (lpString=".dbf") returned 4
	[0039.479] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0039.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0039.479] lstrlenW (lpString=".1cd") returned 4
	[0039.479] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0039.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML") returned 106
	[0039.479] lstrlenW (lpString=".jpg") returned 4
	[0039.480] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0039.480] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0039.480] lstrlenW (lpString="AccessMUISet.XML") returned 16
	[0039.480] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0039.486] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=819) returned 1
	[0039.487] CloseHandle (hObject=0x1f0) returned 1
	[0039.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml")) returned 0x20
	[0039.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.487] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0039.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.487] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0039.487] GetLastError () returned 0x0
	[0039.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x333, lpOverlapped=0x0) returned 1
	[0039.489] WriteFile (in: hFile=0x1f4, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x340, lpOverlapped=0x0) returned 1
	[0039.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0039.490] WriteFile (in: hFile=0x1f4, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xf4, lpOverlapped=0x0) returned 1
	[0039.490] SetEndOfFile (hFile=0x1f4) returned 1
	[0039.490] CloseHandle (hObject=0x1f4) returned 1
	[0039.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.491] SetEndOfFile (hFile=0x1f0) returned 1
	[0039.492] CloseHandle (hObject=0x1f0) returned 1
	[0039.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0039.492] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml")) returned 1
	[0039.492] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0039.492] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0039.492] lstrlenW (lpString=".doc") returned 4
	[0039.492] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0039.493] lstrlenW (lpString=".docx") returned 5
	[0039.493] lstrcmpiW (lpString1=".docx", lpString2="t.XML") returned -1
	[0039.493] lstrlenW (lpString=".pdf") returned 4
	[0039.493] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0039.493] lstrlenW (lpString=".xls") returned 4
	[0039.493] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0039.493] lstrlenW (lpString=".xlsx") returned 5
	[0039.493] lstrcmpiW (lpString1=".xlsx", lpString2="t.XML") returned -1
	[0039.493] lstrlenW (lpString=".ppt") returned 4
	[0039.493] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0039.493] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0039.493] lstrlenW (lpString=".zip") returned 4
	[0039.493] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0039.493] lstrlenW (lpString=".rar") returned 4
	[0039.493] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0039.493] lstrlenW (lpString=".bz2") returned 4
	[0039.493] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0039.493] lstrlenW (lpString=".7z") returned 3
	[0039.493] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0039.493] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0039.493] lstrlenW (lpString=".dbf") returned 4
	[0039.493] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0039.493] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0039.493] lstrlenW (lpString=".1cd") returned 4
	[0039.493] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0039.493] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0039.493] lstrlenW (lpString=".jpg") returned 4
	[0039.493] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0039.493] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0039.493] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0039.493] lstrlenW (lpString=".doc") returned 4
	[0039.493] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0039.493] lstrlenW (lpString=".docx") returned 5
	[0039.494] lstrcmpiW (lpString1=".docx", lpString2="t.XML") returned -1
	[0039.494] lstrlenW (lpString=".pdf") returned 4
	[0039.494] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0039.494] lstrlenW (lpString=".xls") returned 4
	[0039.494] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0039.494] lstrlenW (lpString=".xlsx") returned 5
	[0039.494] lstrcmpiW (lpString1=".xlsx", lpString2="t.XML") returned -1
	[0039.494] lstrlenW (lpString=".ppt") returned 4
	[0039.494] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0039.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0039.494] lstrlenW (lpString=".zip") returned 4
	[0039.494] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0039.494] lstrlenW (lpString=".rar") returned 4
	[0039.494] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0039.494] lstrlenW (lpString=".bz2") returned 4
	[0039.494] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0039.494] lstrlenW (lpString=".7z") returned 3
	[0039.494] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0039.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0039.494] lstrlenW (lpString=".dbf") returned 4
	[0039.494] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0039.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0039.494] lstrlenW (lpString=".1cd") returned 4
	[0039.494] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0039.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML") returned 109
	[0039.494] lstrlenW (lpString=".jpg") returned 4
	[0039.494] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0039.494] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0039.495] lstrlenW (lpString="ExcelMUI.XML") returned 12
	[0039.495] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0039.495] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=1565) returned 1
	[0039.495] CloseHandle (hObject=0x1f0) returned 1
	[0039.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml")) returned 0x20
	[0039.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.495] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0039.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.495] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0039.495] GetLastError () returned 0x0
	[0039.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x61d, lpOverlapped=0x0) returned 1
	[0039.497] WriteFile (in: hFile=0x1f4, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x620, lpOverlapped=0x0) returned 1
	[0039.498] ReadFile (in: hFile=0x1f0, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0039.498] WriteFile (in: hFile=0x1f4, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0039.498] SetEndOfFile (hFile=0x1f4) returned 1
	[0039.498] CloseHandle (hObject=0x1f4) returned 1
	[0039.499] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.499] SetEndOfFile (hFile=0x1f0) returned 1
	[0039.500] CloseHandle (hObject=0x1f0) returned 1
	[0039.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0039.500] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml")) returned 1
	[0039.500] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0039.500] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0039.500] lstrlenW (lpString=".doc") returned 4
	[0039.500] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0039.500] lstrlenW (lpString=".docx") returned 5
	[0039.500] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0039.500] lstrlenW (lpString=".pdf") returned 4
	[0039.500] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0039.500] lstrlenW (lpString=".xls") returned 4
	[0039.500] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0039.500] lstrlenW (lpString=".xlsx") returned 5
	[0039.500] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0039.500] lstrlenW (lpString=".ppt") returned 4
	[0039.500] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0039.501] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0039.501] lstrlenW (lpString=".zip") returned 4
	[0039.501] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0039.501] lstrlenW (lpString=".rar") returned 4
	[0039.501] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0039.501] lstrlenW (lpString=".bz2") returned 4
	[0039.501] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0039.501] lstrlenW (lpString=".7z") returned 3
	[0039.501] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0039.501] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0039.501] lstrlenW (lpString=".dbf") returned 4
	[0039.501] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0039.501] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0039.501] lstrlenW (lpString=".1cd") returned 4
	[0039.501] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0039.501] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0039.501] lstrlenW (lpString=".jpg") returned 4
	[0039.501] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0039.501] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0039.501] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0039.501] lstrlenW (lpString=".doc") returned 4
	[0039.501] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0039.501] lstrlenW (lpString=".docx") returned 5
	[0039.501] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0039.501] lstrlenW (lpString=".pdf") returned 4
	[0039.501] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0039.501] lstrlenW (lpString=".xls") returned 4
	[0039.501] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0039.501] lstrlenW (lpString=".xlsx") returned 5
	[0039.501] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0039.501] lstrlenW (lpString=".ppt") returned 4
	[0039.501] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0039.502] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0039.502] lstrlenW (lpString=".zip") returned 4
	[0039.502] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0039.502] lstrlenW (lpString=".rar") returned 4
	[0039.502] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0039.502] lstrlenW (lpString=".bz2") returned 4
	[0039.502] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0039.502] lstrlenW (lpString=".7z") returned 3
	[0039.502] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0039.502] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0039.502] lstrlenW (lpString=".dbf") returned 4
	[0039.502] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0039.502] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0039.502] lstrlenW (lpString=".1cd") returned 4
	[0039.502] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0039.502] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML") returned 104
	[0039.502] lstrlenW (lpString=".jpg") returned 4
	[0039.502] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0039.502] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0039.502] lstrlenW (lpString="SETUP.XML") returned 9
	[0039.502] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0039.503] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2296) returned 1
	[0039.503] CloseHandle (hObject=0x1f4) returned 1
	[0039.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml")) returned 0x20
	[0039.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.505] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0039.505] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.505] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.505] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0039.506] GetLastError () returned 0x0
	[0039.506] ReadFile (in: hFile=0x1f4, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x8f8, lpOverlapped=0x0) returned 1
	[0039.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x900, lpOverlapped=0x0) returned 1
	[0039.509] ReadFile (in: hFile=0x1f4, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0039.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0039.509] SetEndOfFile (hFile=0x1ec) returned 1
	[0039.509] CloseHandle (hObject=0x1ec) returned 1
	[0039.509] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.509] SetEndOfFile (hFile=0x1f4) returned 1
	[0039.510] CloseHandle (hObject=0x1f4) returned 1
	[0039.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0039.510] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml")) returned 1
	[0039.511] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101
	[0039.511] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101
	[0039.511] lstrlenW (lpString=".doc") returned 4
	[0039.511] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0039.511] lstrlenW (lpString=".docx") returned 5
	[0039.511] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0039.511] lstrlenW (lpString=".pdf") returned 4
	[0039.511] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0039.511] lstrlenW (lpString=".xls") returned 4
	[0039.511] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0039.511] lstrlenW (lpString=".xlsx") returned 5
	[0039.511] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0039.511] lstrlenW (lpString=".ppt") returned 4
	[0039.511] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0039.511] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101
	[0039.511] lstrlenW (lpString=".zip") returned 4
	[0039.511] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0039.511] lstrlenW (lpString=".rar") returned 4
	[0039.511] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0039.511] lstrlenW (lpString=".bz2") returned 4
	[0039.511] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0039.511] lstrlenW (lpString=".7z") returned 3
	[0039.511] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0039.511] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101
	[0039.511] lstrlenW (lpString=".dbf") returned 4
	[0039.511] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0039.511] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101
	[0039.511] lstrlenW (lpString=".1cd") returned 4
	[0039.511] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0039.512] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101
	[0039.512] lstrlenW (lpString=".jpg") returned 4
	[0039.512] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0039.512] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101
	[0039.512] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101
	[0039.512] lstrlenW (lpString=".doc") returned 4
	[0039.512] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0039.512] lstrlenW (lpString=".docx") returned 5
	[0039.512] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0039.512] lstrlenW (lpString=".pdf") returned 4
	[0039.512] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0039.512] lstrlenW (lpString=".xls") returned 4
	[0039.512] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0039.512] lstrlenW (lpString=".xlsx") returned 5
	[0039.512] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0039.512] lstrlenW (lpString=".ppt") returned 4
	[0039.512] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0039.512] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101
	[0039.512] lstrlenW (lpString=".zip") returned 4
	[0039.512] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0039.512] lstrlenW (lpString=".rar") returned 4
	[0039.512] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0039.512] lstrlenW (lpString=".bz2") returned 4
	[0039.512] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0039.512] lstrlenW (lpString=".7z") returned 3
	[0039.512] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0039.512] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101
	[0039.512] lstrlenW (lpString=".dbf") returned 4
	[0039.512] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0039.512] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101
	[0039.512] lstrlenW (lpString=".1cd") returned 4
	[0039.512] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0039.513] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML") returned 101
	[0039.513] lstrlenW (lpString=".jpg") returned 4
	[0039.513] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0039.513] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0039.513] lstrlenW (lpString="GrooveMUI.XML") returned 13
	[0039.513] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0039.513] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=913) returned 1
	[0039.513] CloseHandle (hObject=0x1f4) returned 1
	[0039.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml")) returned 0x20
	[0039.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0039.513] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0039.513] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.513] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.514] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0040.796] GetLastError () returned 0x0
	[0040.796] ReadFile (in: hFile=0x1f4, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x391, lpOverlapped=0x0) returned 1
	[0040.979] WriteFile (in: hFile=0x1fc, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x3a0, lpOverlapped=0x0) returned 1
	[0040.980] ReadFile (in: hFile=0x1f4, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.980] WriteFile (in: hFile=0x1fc, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xee, lpOverlapped=0x0) returned 1
	[0040.980] SetEndOfFile (hFile=0x1fc) returned 1
	[0040.980] CloseHandle (hObject=0x1fc) returned 1
	[0040.981] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.981] SetEndOfFile (hFile=0x1f4) returned 1
	[0040.982] CloseHandle (hObject=0x1f4) returned 1
	[0040.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0040.982] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml")) returned 1
	[0040.982] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0040.982] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0040.983] lstrlenW (lpString=".doc") returned 4
	[0040.983] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.983] lstrlenW (lpString=".docx") returned 5
	[0040.983] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0040.983] lstrlenW (lpString=".pdf") returned 4
	[0040.983] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.983] lstrlenW (lpString=".xls") returned 4
	[0040.983] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.983] lstrlenW (lpString=".xlsx") returned 5
	[0040.983] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0040.983] lstrlenW (lpString=".ppt") returned 4
	[0040.983] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0040.983] lstrlenW (lpString=".zip") returned 4
	[0040.983] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.983] lstrlenW (lpString=".rar") returned 4
	[0040.983] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.983] lstrlenW (lpString=".bz2") returned 4
	[0040.983] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.983] lstrlenW (lpString=".7z") returned 3
	[0040.983] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0040.983] lstrlenW (lpString=".dbf") returned 4
	[0040.983] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0040.983] lstrlenW (lpString=".1cd") returned 4
	[0040.983] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0040.983] lstrlenW (lpString=".jpg") returned 4
	[0040.983] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0040.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0040.984] lstrlenW (lpString=".doc") returned 4
	[0040.984] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0040.984] lstrlenW (lpString=".docx") returned 5
	[0040.984] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0040.984] lstrlenW (lpString=".pdf") returned 4
	[0040.984] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0040.984] lstrlenW (lpString=".xls") returned 4
	[0040.984] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0040.984] lstrlenW (lpString=".xlsx") returned 5
	[0040.984] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0040.984] lstrlenW (lpString=".ppt") returned 4
	[0040.984] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0040.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0040.984] lstrlenW (lpString=".zip") returned 4
	[0040.984] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0040.984] lstrlenW (lpString=".rar") returned 4
	[0040.984] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0040.984] lstrlenW (lpString=".bz2") returned 4
	[0040.984] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0040.984] lstrlenW (lpString=".7z") returned 3
	[0040.984] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0040.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0040.984] lstrlenW (lpString=".dbf") returned 4
	[0040.984] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0040.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0040.984] lstrlenW (lpString=".1cd") returned 4
	[0040.984] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0040.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML") returned 106
	[0040.984] lstrlenW (lpString=".jpg") returned 4
	[0040.984] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0040.985] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0040.985] lstrlenW (lpString="Office32WW.XML") returned 14
	[0040.985] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0040.985] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=4274) returned 1
	[0040.985] CloseHandle (hObject=0x1f4) returned 1
	[0040.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml")) returned 0x20
	[0040.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.985] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0040.985] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.985] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.985] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0040.986] GetLastError () returned 0x0
	[0040.986] ReadFile (in: hFile=0x1f4, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x10b2, lpOverlapped=0x0) returned 1
	[0040.998] WriteFile (in: hFile=0x1fc, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x10c0, lpOverlapped=0x0) returned 1
	[0040.999] ReadFile (in: hFile=0x1f4, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0040.999] WriteFile (in: hFile=0x1fc, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xf0, lpOverlapped=0x0) returned 1
	[0040.999] SetEndOfFile (hFile=0x1fc) returned 1
	[0040.999] CloseHandle (hObject=0x1fc) returned 1
	[0041.000] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.000] SetEndOfFile (hFile=0x1f4) returned 1
	[0041.001] CloseHandle (hObject=0x1f4) returned 1
	[0041.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.001] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml")) returned 1
	[0041.001] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106
	[0041.001] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106
	[0041.001] lstrlenW (lpString=".doc") returned 4
	[0041.001] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.002] lstrlenW (lpString=".docx") returned 5
	[0041.002] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1
	[0041.002] lstrlenW (lpString=".pdf") returned 4
	[0041.002] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.002] lstrlenW (lpString=".xls") returned 4
	[0041.002] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.002] lstrlenW (lpString=".xlsx") returned 5
	[0041.002] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1
	[0041.002] lstrlenW (lpString=".ppt") returned 4
	[0041.002] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106
	[0041.002] lstrlenW (lpString=".zip") returned 4
	[0041.002] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.002] lstrlenW (lpString=".rar") returned 4
	[0041.002] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.002] lstrlenW (lpString=".bz2") returned 4
	[0041.002] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.002] lstrlenW (lpString=".7z") returned 3
	[0041.002] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106
	[0041.002] lstrlenW (lpString=".dbf") returned 4
	[0041.002] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106
	[0041.002] lstrlenW (lpString=".1cd") returned 4
	[0041.002] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106
	[0041.002] lstrlenW (lpString=".jpg") returned 4
	[0041.002] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106
	[0041.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106
	[0041.002] lstrlenW (lpString=".doc") returned 4
	[0041.002] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.002] lstrlenW (lpString=".docx") returned 5
	[0041.003] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1
	[0041.003] lstrlenW (lpString=".pdf") returned 4
	[0041.003] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.003] lstrlenW (lpString=".xls") returned 4
	[0041.003] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.003] lstrlenW (lpString=".xlsx") returned 5
	[0041.003] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1
	[0041.003] lstrlenW (lpString=".ppt") returned 4
	[0041.003] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106
	[0041.003] lstrlenW (lpString=".zip") returned 4
	[0041.003] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.003] lstrlenW (lpString=".rar") returned 4
	[0041.003] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.003] lstrlenW (lpString=".bz2") returned 4
	[0041.003] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.003] lstrlenW (lpString=".7z") returned 3
	[0041.003] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106
	[0041.003] lstrlenW (lpString=".dbf") returned 4
	[0041.003] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106
	[0041.003] lstrlenW (lpString=".1cd") returned 4
	[0041.003] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML") returned 106
	[0041.003] lstrlenW (lpString=".jpg") returned 4
	[0041.003] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.003] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.004] lstrlenW (lpString="SETUP.XML") returned 9
	[0041.004] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.259] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=1988) returned 1
	[0041.259] CloseHandle (hObject=0x200) returned 1
	[0041.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml")) returned 0x20
	[0041.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.259] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0041.259] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.259] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.259] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0041.260] GetLastError () returned 0x0
	[0041.260] ReadFile (in: hFile=0x200, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x7c4, lpOverlapped=0x0) returned 1
	[0041.431] WriteFile (in: hFile=0x19c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x7d0, lpOverlapped=0x0) returned 1
	[0041.432] ReadFile (in: hFile=0x200, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.432] WriteFile (in: hFile=0x19c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0041.432] SetEndOfFile (hFile=0x19c) returned 1
	[0041.432] CloseHandle (hObject=0x19c) returned 1
	[0041.433] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.433] SetEndOfFile (hFile=0x200) returned 1
	[0041.434] CloseHandle (hObject=0x200) returned 1
	[0041.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.434] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml")) returned 1
	[0041.434] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103
	[0041.434] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103
	[0041.434] lstrlenW (lpString=".doc") returned 4
	[0041.434] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.434] lstrlenW (lpString=".docx") returned 5
	[0041.435] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0041.435] lstrlenW (lpString=".pdf") returned 4
	[0041.435] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.435] lstrlenW (lpString=".xls") returned 4
	[0041.435] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.435] lstrlenW (lpString=".xlsx") returned 5
	[0041.435] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0041.435] lstrlenW (lpString=".ppt") returned 4
	[0041.435] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103
	[0041.435] lstrlenW (lpString=".zip") returned 4
	[0041.435] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.435] lstrlenW (lpString=".rar") returned 4
	[0041.435] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.435] lstrlenW (lpString=".bz2") returned 4
	[0041.435] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.435] lstrlenW (lpString=".7z") returned 3
	[0041.435] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103
	[0041.435] lstrlenW (lpString=".dbf") returned 4
	[0041.435] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103
	[0041.435] lstrlenW (lpString=".1cd") returned 4
	[0041.435] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103
	[0041.435] lstrlenW (lpString=".jpg") returned 4
	[0041.435] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103
	[0041.435] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103
	[0041.435] lstrlenW (lpString=".doc") returned 4
	[0041.435] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.436] lstrlenW (lpString=".docx") returned 5
	[0041.436] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0041.436] lstrlenW (lpString=".pdf") returned 4
	[0041.436] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.436] lstrlenW (lpString=".xls") returned 4
	[0041.436] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.436] lstrlenW (lpString=".xlsx") returned 5
	[0041.436] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0041.436] lstrlenW (lpString=".ppt") returned 4
	[0041.436] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.436] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103
	[0041.436] lstrlenW (lpString=".zip") returned 4
	[0041.436] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.436] lstrlenW (lpString=".rar") returned 4
	[0041.436] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.436] lstrlenW (lpString=".bz2") returned 4
	[0041.436] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.436] lstrlenW (lpString=".7z") returned 3
	[0041.436] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.436] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103
	[0041.436] lstrlenW (lpString=".dbf") returned 4
	[0041.436] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.436] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103
	[0041.436] lstrlenW (lpString=".1cd") returned 4
	[0041.436] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.436] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML") returned 103
	[0041.436] lstrlenW (lpString=".jpg") returned 4
	[0041.436] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.436] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.437] lstrlenW (lpString="SETUP.XML") returned 9
	[0041.437] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0041.448] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=16683) returned 1
	[0041.448] CloseHandle (hObject=0x19c) returned 1
	[0041.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml")) returned 0x20
	[0041.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.449] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0041.449] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.457] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.457] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0041.459] GetLastError () returned 0x0
	[0041.459] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x412b, lpOverlapped=0x0) returned 1
	[0041.461] WriteFile (in: hFile=0x1fc, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x4130, lpOverlapped=0x0) returned 1
	[0041.462] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.462] WriteFile (in: hFile=0x1fc, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0041.462] SetEndOfFile (hFile=0x1fc) returned 1
	[0041.462] CloseHandle (hObject=0x1fc) returned 1
	[0041.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.463] SetEndOfFile (hFile=0x19c) returned 1
	[0041.464] CloseHandle (hObject=0x19c) returned 1
	[0041.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.464] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml")) returned 1
	[0041.464] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97
	[0041.464] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97
	[0041.464] lstrlenW (lpString=".doc") returned 4
	[0041.464] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.464] lstrlenW (lpString=".docx") returned 5
	[0041.464] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0041.464] lstrlenW (lpString=".pdf") returned 4
	[0041.465] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.465] lstrlenW (lpString=".xls") returned 4
	[0041.465] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.465] lstrlenW (lpString=".xlsx") returned 5
	[0041.465] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0041.465] lstrlenW (lpString=".ppt") returned 4
	[0041.465] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97
	[0041.465] lstrlenW (lpString=".zip") returned 4
	[0041.465] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.465] lstrlenW (lpString=".rar") returned 4
	[0041.465] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.465] lstrlenW (lpString=".bz2") returned 4
	[0041.465] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.465] lstrlenW (lpString=".7z") returned 3
	[0041.465] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97
	[0041.465] lstrlenW (lpString=".dbf") returned 4
	[0041.465] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97
	[0041.465] lstrlenW (lpString=".1cd") returned 4
	[0041.465] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97
	[0041.465] lstrlenW (lpString=".jpg") returned 4
	[0041.465] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97
	[0041.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97
	[0041.465] lstrlenW (lpString=".doc") returned 4
	[0041.465] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.465] lstrlenW (lpString=".docx") returned 5
	[0041.465] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0041.465] lstrlenW (lpString=".pdf") returned 4
	[0041.466] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.466] lstrlenW (lpString=".xls") returned 4
	[0041.466] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.466] lstrlenW (lpString=".xlsx") returned 5
	[0041.466] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0041.466] lstrlenW (lpString=".ppt") returned 4
	[0041.466] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97
	[0041.466] lstrlenW (lpString=".zip") returned 4
	[0041.466] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.466] lstrlenW (lpString=".rar") returned 4
	[0041.466] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.466] lstrlenW (lpString=".bz2") returned 4
	[0041.466] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.466] lstrlenW (lpString=".7z") returned 3
	[0041.466] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97
	[0041.466] lstrlenW (lpString=".dbf") returned 4
	[0041.466] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97
	[0041.466] lstrlenW (lpString=".1cd") returned 4
	[0041.466] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML") returned 97
	[0041.466] lstrlenW (lpString=".jpg") returned 4
	[0041.466] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.466] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.466] lstrlenW (lpString="SETUP.XML") returned 9
	[0041.466] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0041.467] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=1872) returned 1
	[0041.467] CloseHandle (hObject=0x19c) returned 1
	[0041.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml")) returned 0x20
	[0041.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.467] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0041.467] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.467] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.467] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0041.468] GetLastError () returned 0x0
	[0041.468] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x750, lpOverlapped=0x0) returned 1
	[0041.822] WriteFile (in: hFile=0x1fc, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x760, lpOverlapped=0x0) returned 1
	[0041.846] ReadFile (in: hFile=0x19c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0041.846] WriteFile (in: hFile=0x1fc, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0041.846] SetEndOfFile (hFile=0x1fc) returned 1
	[0041.847] CloseHandle (hObject=0x1fc) returned 1
	[0041.848] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.848] SetEndOfFile (hFile=0x19c) returned 1
	[0041.848] CloseHandle (hObject=0x19c) returned 1
	[0041.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0041.849] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml")) returned 1
	[0041.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103
	[0041.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103
	[0041.849] lstrlenW (lpString=".doc") returned 4
	[0041.849] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.849] lstrlenW (lpString=".docx") returned 5
	[0041.849] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0041.849] lstrlenW (lpString=".pdf") returned 4
	[0041.849] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.849] lstrlenW (lpString=".xls") returned 4
	[0041.849] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.849] lstrlenW (lpString=".xlsx") returned 5
	[0041.849] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0041.849] lstrlenW (lpString=".ppt") returned 4
	[0041.849] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103
	[0041.849] lstrlenW (lpString=".zip") returned 4
	[0041.849] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.849] lstrlenW (lpString=".rar") returned 4
	[0041.849] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.849] lstrlenW (lpString=".bz2") returned 4
	[0041.849] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.850] lstrlenW (lpString=".7z") returned 3
	[0041.850] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103
	[0041.850] lstrlenW (lpString=".dbf") returned 4
	[0041.850] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103
	[0041.850] lstrlenW (lpString=".1cd") returned 4
	[0041.850] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103
	[0041.850] lstrlenW (lpString=".jpg") returned 4
	[0041.850] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103
	[0041.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103
	[0041.850] lstrlenW (lpString=".doc") returned 4
	[0041.850] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0041.850] lstrlenW (lpString=".docx") returned 5
	[0041.850] lstrcmpiW (lpString1=".docx", lpString2="P.XML") returned -1
	[0041.850] lstrlenW (lpString=".pdf") returned 4
	[0041.850] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0041.850] lstrlenW (lpString=".xls") returned 4
	[0041.850] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0041.850] lstrlenW (lpString=".xlsx") returned 5
	[0041.850] lstrcmpiW (lpString1=".xlsx", lpString2="P.XML") returned -1
	[0041.850] lstrlenW (lpString=".ppt") returned 4
	[0041.850] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0041.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103
	[0041.850] lstrlenW (lpString=".zip") returned 4
	[0041.850] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0041.850] lstrlenW (lpString=".rar") returned 4
	[0041.850] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0041.850] lstrlenW (lpString=".bz2") returned 4
	[0041.850] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0041.850] lstrlenW (lpString=".7z") returned 3
	[0041.850] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0041.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103
	[0041.851] lstrlenW (lpString=".dbf") returned 4
	[0041.851] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0041.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103
	[0041.851] lstrlenW (lpString=".1cd") returned 4
	[0041.851] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0041.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML") returned 103
	[0041.851] lstrlenW (lpString=".jpg") returned 4
	[0041.851] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0041.851] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0041.851] lstrlenW (lpString="ProPlusrWW.XML") returned 14
	[0041.851] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0042.105] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=16852) returned 1
	[0042.105] CloseHandle (hObject=0x20c) returned 1
	[0042.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml")) returned 0x20
	[0042.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0042.105] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0042.105] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.105] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.105] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0042.106] GetLastError () returned 0x0
	[0042.106] ReadFile (in: hFile=0x20c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x41d4, lpOverlapped=0x0) returned 1
	[0042.174] WriteFile (in: hFile=0x208, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x41e0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x41e0, lpOverlapped=0x0) returned 1
	[0042.176] ReadFile (in: hFile=0x20c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0042.176] WriteFile (in: hFile=0x208, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xf0, lpOverlapped=0x0) returned 1
	[0042.177] SetEndOfFile (hFile=0x208) returned 1
	[0042.177] CloseHandle (hObject=0x208) returned 1
	[0042.177] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.177] SetEndOfFile (hFile=0x20c) returned 1
	[0042.178] CloseHandle (hObject=0x20c) returned 1
	[0042.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0042.179] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml")) returned 1
	[0042.179] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0042.179] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0042.179] lstrlenW (lpString=".doc") returned 4
	[0042.179] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0042.179] lstrlenW (lpString=".docx") returned 5
	[0042.179] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1
	[0042.179] lstrlenW (lpString=".pdf") returned 4
	[0042.179] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0042.179] lstrlenW (lpString=".xls") returned 4
	[0042.179] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0042.179] lstrlenW (lpString=".xlsx") returned 5
	[0042.179] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1
	[0042.179] lstrlenW (lpString=".ppt") returned 4
	[0042.179] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0042.179] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0042.179] lstrlenW (lpString=".zip") returned 4
	[0042.179] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0042.179] lstrlenW (lpString=".rar") returned 4
	[0042.180] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0042.180] lstrlenW (lpString=".bz2") returned 4
	[0042.180] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0042.180] lstrlenW (lpString=".7z") returned 3
	[0042.180] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0042.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0042.180] lstrlenW (lpString=".dbf") returned 4
	[0042.180] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0042.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0042.180] lstrlenW (lpString=".1cd") returned 4
	[0042.180] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0042.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0042.180] lstrlenW (lpString=".jpg") returned 4
	[0042.180] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0042.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0042.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0042.180] lstrlenW (lpString=".doc") returned 4
	[0042.180] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0042.180] lstrlenW (lpString=".docx") returned 5
	[0042.180] lstrcmpiW (lpString1=".docx", lpString2="W.XML") returned -1
	[0042.180] lstrlenW (lpString=".pdf") returned 4
	[0042.180] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0042.180] lstrlenW (lpString=".xls") returned 4
	[0042.180] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0042.180] lstrlenW (lpString=".xlsx") returned 5
	[0042.180] lstrcmpiW (lpString1=".xlsx", lpString2="W.XML") returned -1
	[0042.180] lstrlenW (lpString=".ppt") returned 4
	[0042.180] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0042.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0042.180] lstrlenW (lpString=".zip") returned 4
	[0042.180] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0042.180] lstrlenW (lpString=".rar") returned 4
	[0042.181] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0042.181] lstrlenW (lpString=".bz2") returned 4
	[0042.181] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0042.181] lstrlenW (lpString=".7z") returned 3
	[0042.181] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0042.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0042.181] lstrlenW (lpString=".dbf") returned 4
	[0042.181] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0042.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0042.181] lstrlenW (lpString=".1cd") returned 4
	[0042.181] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0042.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML") returned 103
	[0042.181] lstrlenW (lpString=".jpg") returned 4
	[0042.181] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0042.181] lstrcmpiW (lpString1=".XML", lpString2=".beets") returned 1
	[0042.181] lstrlenW (lpString="VisioMUI.XML") returned 12
	[0042.181] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0042.903] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=9503) returned 1
	[0042.903] CloseHandle (hObject=0x1ac) returned 1
	[0042.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml")) returned 0x20
	[0042.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0042.903] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0042.903] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.903] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.903] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0043.822] GetLastError () returned 0x0
	[0043.822] ReadFile (in: hFile=0x1ac, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x251f, lpOverlapped=0x0) returned 1
	[0043.824] WriteFile (in: hFile=0x1d4, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x2520, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x2520, lpOverlapped=0x0) returned 1
	[0043.825] ReadFile (in: hFile=0x1ac, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0043.825] WriteFile (in: hFile=0x1d4, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0043.825] SetEndOfFile (hFile=0x1d4) returned 1
	[0043.825] CloseHandle (hObject=0x1d4) returned 1
	[0043.826] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.826] SetEndOfFile (hFile=0x1ac) returned 1
	[0043.827] CloseHandle (hObject=0x1ac) returned 1
	[0043.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0043.828] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml")) returned 1
	[0043.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104
	[0043.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104
	[0043.828] lstrlenW (lpString=".doc") returned 4
	[0043.828] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0043.828] lstrlenW (lpString=".docx") returned 5
	[0043.828] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0043.828] lstrlenW (lpString=".pdf") returned 4
	[0043.828] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0043.828] lstrlenW (lpString=".xls") returned 4
	[0043.828] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0043.828] lstrlenW (lpString=".xlsx") returned 5
	[0043.828] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0043.828] lstrlenW (lpString=".ppt") returned 4
	[0043.828] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0043.828] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104
	[0043.828] lstrlenW (lpString=".zip") returned 4
	[0043.828] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0043.828] lstrlenW (lpString=".rar") returned 4
	[0043.828] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0043.828] lstrlenW (lpString=".bz2") returned 4
	[0043.829] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0043.829] lstrlenW (lpString=".7z") returned 3
	[0043.829] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0043.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104
	[0043.829] lstrlenW (lpString=".dbf") returned 4
	[0043.829] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0043.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104
	[0043.829] lstrlenW (lpString=".1cd") returned 4
	[0043.829] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0043.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104
	[0043.829] lstrlenW (lpString=".jpg") returned 4
	[0043.829] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0043.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104
	[0043.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104
	[0043.829] lstrlenW (lpString=".doc") returned 4
	[0043.829] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0043.829] lstrlenW (lpString=".docx") returned 5
	[0043.829] lstrcmpiW (lpString1=".docx", lpString2="I.XML") returned -1
	[0043.829] lstrlenW (lpString=".pdf") returned 4
	[0043.829] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0043.829] lstrlenW (lpString=".xls") returned 4
	[0043.829] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0043.829] lstrlenW (lpString=".xlsx") returned 5
	[0043.829] lstrcmpiW (lpString1=".xlsx", lpString2="I.XML") returned -1
	[0043.829] lstrlenW (lpString=".ppt") returned 4
	[0043.829] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0043.829] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104
	[0043.829] lstrlenW (lpString=".zip") returned 4
	[0043.829] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0043.829] lstrlenW (lpString=".rar") returned 4
	[0043.829] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0043.830] lstrlenW (lpString=".bz2") returned 4
	[0043.830] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0043.830] lstrlenW (lpString=".7z") returned 3
	[0043.830] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0043.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104
	[0043.830] lstrlenW (lpString=".dbf") returned 4
	[0043.830] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0043.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104
	[0043.830] lstrlenW (lpString=".1cd") returned 4
	[0043.830] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0043.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML") returned 104
	[0043.830] lstrlenW (lpString=".jpg") returned 4
	[0043.830] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0043.830] lstrcmpiW (lpString1=".DAT", lpString2=".beets") returned 1
	[0043.830] lstrlenW (lpString="STOCKS.DAT") returned 10
	[0043.830] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0045.973] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=39017) returned 1
	[0045.973] CloseHandle (hObject=0x220) returned 1
	[0045.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat")) returned 0x20
	[0045.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0045.973] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0045.973] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0045.973] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0045.974] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0045.974] GetLastError () returned 0x0
	[0045.974] ReadFile (in: hFile=0x220, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x9869, lpOverlapped=0x0) returned 1
	[0045.976] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x9870, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x9870, lpOverlapped=0x0) returned 1
	[0045.978] ReadFile (in: hFile=0x220, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0045.978] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0045.978] SetEndOfFile (hFile=0x21c) returned 1
	[0045.978] CloseHandle (hObject=0x21c) returned 1
	[0045.979] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0045.979] SetEndOfFile (hFile=0x220) returned 1
	[0045.980] CloseHandle (hObject=0x220) returned 1
	[0045.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0045.980] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat")) returned 1
	[0045.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78
	[0045.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78
	[0045.981] lstrlenW (lpString=".doc") returned 4
	[0045.981] lstrcmpiW (lpString1=".doc", lpString2=".DAT") returned 1
	[0045.981] lstrlenW (lpString=".docx") returned 5
	[0045.981] lstrcmpiW (lpString1=".docx", lpString2="S.DAT") returned -1
	[0045.981] lstrlenW (lpString=".pdf") returned 4
	[0045.981] lstrcmpiW (lpString1=".pdf", lpString2=".DAT") returned 1
	[0045.981] lstrlenW (lpString=".xls") returned 4
	[0045.981] lstrcmpiW (lpString1=".xls", lpString2=".DAT") returned 1
	[0045.981] lstrlenW (lpString=".xlsx") returned 5
	[0045.981] lstrcmpiW (lpString1=".xlsx", lpString2="S.DAT") returned -1
	[0045.981] lstrlenW (lpString=".ppt") returned 4
	[0045.981] lstrcmpiW (lpString1=".ppt", lpString2=".DAT") returned 1
	[0045.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78
	[0045.981] lstrlenW (lpString=".zip") returned 4
	[0045.981] lstrcmpiW (lpString1=".zip", lpString2=".DAT") returned 1
	[0045.981] lstrlenW (lpString=".rar") returned 4
	[0045.981] lstrcmpiW (lpString1=".rar", lpString2=".DAT") returned 1
	[0045.981] lstrlenW (lpString=".bz2") returned 4
	[0045.981] lstrcmpiW (lpString1=".bz2", lpString2=".DAT") returned -1
	[0045.981] lstrlenW (lpString=".7z") returned 3
	[0045.981] lstrcmpiW (lpString1=".7z", lpString2="DAT") returned -1
	[0045.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78
	[0045.981] lstrlenW (lpString=".dbf") returned 4
	[0045.981] lstrcmpiW (lpString1=".dbf", lpString2=".DAT") returned 1
	[0045.982] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78
	[0045.982] lstrlenW (lpString=".1cd") returned 4
	[0045.982] lstrcmpiW (lpString1=".1cd", lpString2=".DAT") returned -1
	[0045.982] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78
	[0045.982] lstrlenW (lpString=".jpg") returned 4
	[0045.982] lstrcmpiW (lpString1=".jpg", lpString2=".DAT") returned 1
	[0045.982] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78
	[0045.982] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78
	[0045.982] lstrlenW (lpString=".doc") returned 4
	[0045.982] lstrcmpiW (lpString1=".doc", lpString2=".DAT") returned 1
	[0045.982] lstrlenW (lpString=".docx") returned 5
	[0045.982] lstrcmpiW (lpString1=".docx", lpString2="S.DAT") returned -1
	[0045.982] lstrlenW (lpString=".pdf") returned 4
	[0045.982] lstrcmpiW (lpString1=".pdf", lpString2=".DAT") returned 1
	[0045.982] lstrlenW (lpString=".xls") returned 4
	[0045.982] lstrcmpiW (lpString1=".xls", lpString2=".DAT") returned 1
	[0045.982] lstrlenW (lpString=".xlsx") returned 5
	[0045.982] lstrcmpiW (lpString1=".xlsx", lpString2="S.DAT") returned -1
	[0045.982] lstrlenW (lpString=".ppt") returned 4
	[0045.982] lstrcmpiW (lpString1=".ppt", lpString2=".DAT") returned 1
	[0045.982] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78
	[0045.982] lstrlenW (lpString=".zip") returned 4
	[0045.982] lstrcmpiW (lpString1=".zip", lpString2=".DAT") returned 1
	[0045.982] lstrlenW (lpString=".rar") returned 4
	[0045.982] lstrcmpiW (lpString1=".rar", lpString2=".DAT") returned 1
	[0045.982] lstrlenW (lpString=".bz2") returned 4
	[0045.982] lstrcmpiW (lpString1=".bz2", lpString2=".DAT") returned -1
	[0045.982] lstrlenW (lpString=".7z") returned 3
	[0045.982] lstrcmpiW (lpString1=".7z", lpString2="DAT") returned -1
	[0045.982] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78
	[0045.982] lstrlenW (lpString=".dbf") returned 4
	[0045.982] lstrcmpiW (lpString1=".dbf", lpString2=".DAT") returned 1
	[0045.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78
	[0045.983] lstrlenW (lpString=".1cd") returned 4
	[0045.983] lstrcmpiW (lpString1=".1cd", lpString2=".DAT") returned -1
	[0045.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT") returned 78
	[0045.983] lstrlenW (lpString=".jpg") returned 4
	[0045.983] lstrcmpiW (lpString1=".jpg", lpString2=".DAT") returned 1
	[0045.983] lstrcmpiW (lpString1=".htm", lpString2=".beets") returned 1
	[0045.983] lstrlenW (lpString="Bears.htm") returned 9
	[0045.983] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0045.984] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=255) returned 1
	[0045.984] CloseHandle (hObject=0x220) returned 1
	[0045.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20
	[0045.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0045.985] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0045.985] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0045.985] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0045.985] lstrlenW (lpString=".doc") returned 4
	[0045.985] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0045.985] lstrlenW (lpString=".docx") returned 5
	[0045.985] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0045.985] lstrlenW (lpString=".pdf") returned 4
	[0045.985] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0045.985] lstrlenW (lpString=".xls") returned 4
	[0045.985] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0045.985] lstrlenW (lpString=".xlsx") returned 5
	[0045.985] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0045.985] lstrlenW (lpString=".ppt") returned 4
	[0045.985] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0045.985] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0045.985] lstrlenW (lpString=".zip") returned 4
	[0045.985] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0045.985] lstrlenW (lpString=".rar") returned 4
	[0045.985] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0045.985] lstrlenW (lpString=".bz2") returned 4
	[0045.985] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0045.985] lstrlenW (lpString=".7z") returned 3
	[0045.985] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0045.985] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0045.985] lstrlenW (lpString=".dbf") returned 4
	[0045.985] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0045.985] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0045.986] lstrlenW (lpString=".1cd") returned 4
	[0045.986] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0045.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0045.986] lstrlenW (lpString=".jpg") returned 4
	[0045.986] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0045.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0045.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0045.986] lstrlenW (lpString=".doc") returned 4
	[0045.986] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0045.986] lstrlenW (lpString=".docx") returned 5
	[0045.986] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0045.986] lstrlenW (lpString=".pdf") returned 4
	[0045.986] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0045.986] lstrlenW (lpString=".xls") returned 4
	[0045.986] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0045.986] lstrlenW (lpString=".xlsx") returned 5
	[0045.986] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0045.986] lstrlenW (lpString=".ppt") returned 4
	[0045.986] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0045.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0045.986] lstrlenW (lpString=".zip") returned 4
	[0045.986] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0045.986] lstrlenW (lpString=".rar") returned 4
	[0045.986] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0045.986] lstrlenW (lpString=".bz2") returned 4
	[0045.986] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0045.986] lstrlenW (lpString=".7z") returned 3
	[0045.986] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0045.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0045.986] lstrlenW (lpString=".dbf") returned 4
	[0045.986] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0045.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0045.986] lstrlenW (lpString=".1cd") returned 4
	[0045.987] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0045.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 67
	[0045.987] lstrlenW (lpString=".jpg") returned 4
	[0045.987] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0045.987] lstrcmpiW (lpString1=".jpg", lpString2=".beets") returned 1
	[0045.987] lstrlenW (lpString="Bears.jpg") returned 9
	[0045.987] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0045.987] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=1074) returned 1
	[0045.987] CloseHandle (hObject=0x220) returned 1
	[0045.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20
	[0045.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0045.987] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0045.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0045.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0045.987] lstrlenW (lpString=".doc") returned 4
	[0045.988] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0045.988] lstrlenW (lpString=".docx") returned 5
	[0045.988] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0045.988] lstrlenW (lpString=".pdf") returned 4
	[0045.988] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0045.988] lstrlenW (lpString=".xls") returned 4
	[0045.988] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0045.988] lstrlenW (lpString=".xlsx") returned 5
	[0045.988] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0045.988] lstrlenW (lpString=".ppt") returned 4
	[0045.988] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0045.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0045.988] lstrlenW (lpString=".zip") returned 4
	[0045.988] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0045.988] lstrlenW (lpString=".rar") returned 4
	[0045.988] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0045.988] lstrlenW (lpString=".bz2") returned 4
	[0045.988] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0045.988] lstrlenW (lpString=".7z") returned 3
	[0045.988] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0045.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0045.988] lstrlenW (lpString=".dbf") returned 4
	[0045.988] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0045.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0045.988] lstrlenW (lpString=".1cd") returned 4
	[0045.988] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0045.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0045.988] lstrlenW (lpString=".jpg") returned 4
	[0045.988] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0045.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0045.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0045.988] lstrlenW (lpString=".doc") returned 4
	[0045.988] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0045.989] lstrlenW (lpString=".docx") returned 5
	[0045.989] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0045.989] lstrlenW (lpString=".pdf") returned 4
	[0045.989] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0045.989] lstrlenW (lpString=".xls") returned 4
	[0045.989] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0045.989] lstrlenW (lpString=".xlsx") returned 5
	[0045.989] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0045.989] lstrlenW (lpString=".ppt") returned 4
	[0045.989] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0045.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0045.989] lstrlenW (lpString=".zip") returned 4
	[0045.989] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0045.989] lstrlenW (lpString=".rar") returned 4
	[0045.989] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0045.989] lstrlenW (lpString=".bz2") returned 4
	[0045.989] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0045.989] lstrlenW (lpString=".7z") returned 3
	[0045.989] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0045.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0045.989] lstrlenW (lpString=".dbf") returned 4
	[0045.989] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0045.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0045.989] lstrlenW (lpString=".1cd") returned 4
	[0045.989] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0045.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 67
	[0045.989] lstrlenW (lpString=".jpg") returned 4
	[0045.989] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0045.989] lstrcmpiW (lpString1=".jpg", lpString2=".beets") returned 1
	[0045.990] lstrlenW (lpString="Blue_Gradient.jpg") returned 17
	[0045.990] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0045.990] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2575) returned 1
	[0045.990] CloseHandle (hObject=0x220) returned 1
	[0045.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg")) returned 0x20
	[0045.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0045.991] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0045.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0045.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0045.991] lstrlenW (lpString=".doc") returned 4
	[0045.991] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0045.991] lstrlenW (lpString=".docx") returned 5
	[0045.991] lstrcmpiW (lpString1=".docx", lpString2="t.jpg") returned -1
	[0045.991] lstrlenW (lpString=".pdf") returned 4
	[0045.991] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0045.991] lstrlenW (lpString=".xls") returned 4
	[0045.991] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0045.991] lstrlenW (lpString=".xlsx") returned 5
	[0045.991] lstrcmpiW (lpString1=".xlsx", lpString2="t.jpg") returned -1
	[0045.991] lstrlenW (lpString=".ppt") returned 4
	[0045.991] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0045.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0045.991] lstrlenW (lpString=".zip") returned 4
	[0045.991] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0045.991] lstrlenW (lpString=".rar") returned 4
	[0045.991] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0045.991] lstrlenW (lpString=".bz2") returned 4
	[0045.991] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0045.991] lstrlenW (lpString=".7z") returned 3
	[0045.991] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0045.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0045.991] lstrlenW (lpString=".dbf") returned 4
	[0045.991] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0045.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0045.991] lstrlenW (lpString=".1cd") returned 4
	[0045.991] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0045.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0045.991] lstrlenW (lpString=".jpg") returned 4
	[0045.992] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0045.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0045.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0045.992] lstrlenW (lpString=".doc") returned 4
	[0045.992] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0045.992] lstrlenW (lpString=".docx") returned 5
	[0045.992] lstrcmpiW (lpString1=".docx", lpString2="t.jpg") returned -1
	[0045.992] lstrlenW (lpString=".pdf") returned 4
	[0045.992] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0045.992] lstrlenW (lpString=".xls") returned 4
	[0045.992] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0045.992] lstrlenW (lpString=".xlsx") returned 5
	[0045.992] lstrcmpiW (lpString1=".xlsx", lpString2="t.jpg") returned -1
	[0045.992] lstrlenW (lpString=".ppt") returned 4
	[0045.992] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0045.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0045.992] lstrlenW (lpString=".zip") returned 4
	[0045.992] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0045.992] lstrlenW (lpString=".rar") returned 4
	[0045.992] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0045.992] lstrlenW (lpString=".bz2") returned 4
	[0045.992] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0045.992] lstrlenW (lpString=".7z") returned 3
	[0045.992] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0045.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0045.992] lstrlenW (lpString=".dbf") returned 4
	[0045.992] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0045.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0045.992] lstrlenW (lpString=".1cd") returned 4
	[0045.992] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0045.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg") returned 75
	[0045.992] lstrlenW (lpString=".jpg") returned 4
	[0045.992] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0045.993] lstrcmpiW (lpString1=".gif", lpString2=".beets") returned 1
	[0045.993] lstrlenW (lpString="Cave_Drawings.gif") returned 17
	[0045.993] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0045.993] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=4587) returned 1
	[0045.993] CloseHandle (hObject=0x220) returned 1
	[0045.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif")) returned 0x20
	[0045.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0045.993] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0045.993] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0045.993] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0045.993] lstrlenW (lpString=".doc") returned 4
	[0045.993] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0045.993] lstrlenW (lpString=".docx") returned 5
	[0045.993] lstrcmpiW (lpString1=".docx", lpString2="s.gif") returned -1
	[0045.993] lstrlenW (lpString=".pdf") returned 4
	[0045.993] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0045.994] lstrlenW (lpString=".xls") returned 4
	[0045.994] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0045.994] lstrlenW (lpString=".xlsx") returned 5
	[0045.994] lstrcmpiW (lpString1=".xlsx", lpString2="s.gif") returned -1
	[0045.994] lstrlenW (lpString=".ppt") returned 4
	[0045.994] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0045.994] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0045.994] lstrlenW (lpString=".zip") returned 4
	[0045.994] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0045.994] lstrlenW (lpString=".rar") returned 4
	[0045.994] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0045.994] lstrlenW (lpString=".bz2") returned 4
	[0045.994] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0045.994] lstrlenW (lpString=".7z") returned 3
	[0045.994] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0045.994] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0045.994] lstrlenW (lpString=".dbf") returned 4
	[0045.994] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0045.994] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0045.994] lstrlenW (lpString=".1cd") returned 4
	[0045.994] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0045.994] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0045.994] lstrlenW (lpString=".jpg") returned 4
	[0045.994] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0045.994] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0045.994] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0045.994] lstrlenW (lpString=".doc") returned 4
	[0045.994] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0045.994] lstrlenW (lpString=".docx") returned 5
	[0045.994] lstrcmpiW (lpString1=".docx", lpString2="s.gif") returned -1
	[0045.994] lstrlenW (lpString=".pdf") returned 4
	[0045.994] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0045.994] lstrlenW (lpString=".xls") returned 4
	[0045.995] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0045.995] lstrlenW (lpString=".xlsx") returned 5
	[0045.995] lstrcmpiW (lpString1=".xlsx", lpString2="s.gif") returned -1
	[0045.995] lstrlenW (lpString=".ppt") returned 4
	[0045.995] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0045.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0045.995] lstrlenW (lpString=".zip") returned 4
	[0045.995] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0045.995] lstrlenW (lpString=".rar") returned 4
	[0045.995] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0045.995] lstrlenW (lpString=".bz2") returned 4
	[0045.995] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0045.995] lstrlenW (lpString=".7z") returned 3
	[0045.995] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0045.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0045.995] lstrlenW (lpString=".dbf") returned 4
	[0045.995] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0045.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0045.995] lstrlenW (lpString=".1cd") returned 4
	[0045.995] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0045.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif") returned 75
	[0045.995] lstrlenW (lpString=".jpg") returned 4
	[0045.995] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0045.995] lstrcmpiW (lpString1=".gif", lpString2=".beets") returned 1
	[0045.995] lstrlenW (lpString="Connectivity.gif") returned 16
	[0045.995] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0045.996] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2319) returned 1
	[0045.996] CloseHandle (hObject=0x220) returned 1
	[0045.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif")) returned 0x20
	[0045.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0045.996] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0045.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0045.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0045.996] lstrlenW (lpString=".doc") returned 4
	[0045.996] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0045.996] lstrlenW (lpString=".docx") returned 5
	[0045.996] lstrcmpiW (lpString1=".docx", lpString2="y.gif") returned -1
	[0045.996] lstrlenW (lpString=".pdf") returned 4
	[0045.996] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0045.996] lstrlenW (lpString=".xls") returned 4
	[0045.996] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0045.996] lstrlenW (lpString=".xlsx") returned 5
	[0045.996] lstrcmpiW (lpString1=".xlsx", lpString2="y.gif") returned -1
	[0045.996] lstrlenW (lpString=".ppt") returned 4
	[0045.996] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0045.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0045.997] lstrlenW (lpString=".zip") returned 4
	[0045.997] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0045.997] lstrlenW (lpString=".rar") returned 4
	[0045.997] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0045.997] lstrlenW (lpString=".bz2") returned 4
	[0045.997] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0045.997] lstrlenW (lpString=".7z") returned 3
	[0045.997] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0045.997] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0045.997] lstrlenW (lpString=".dbf") returned 4
	[0045.997] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0045.997] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0045.997] lstrlenW (lpString=".1cd") returned 4
	[0045.997] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0045.997] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0045.997] lstrlenW (lpString=".jpg") returned 4
	[0045.997] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0045.997] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0045.997] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0045.997] lstrlenW (lpString=".doc") returned 4
	[0045.997] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0045.997] lstrlenW (lpString=".docx") returned 5
	[0045.997] lstrcmpiW (lpString1=".docx", lpString2="y.gif") returned -1
	[0045.997] lstrlenW (lpString=".pdf") returned 4
	[0045.997] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0045.997] lstrlenW (lpString=".xls") returned 4
	[0045.997] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0045.997] lstrlenW (lpString=".xlsx") returned 5
	[0045.997] lstrcmpiW (lpString1=".xlsx", lpString2="y.gif") returned -1
	[0045.997] lstrlenW (lpString=".ppt") returned 4
	[0045.997] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0045.997] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0045.997] lstrlenW (lpString=".zip") returned 4
	[0045.998] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0045.998] lstrlenW (lpString=".rar") returned 4
	[0045.998] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0045.998] lstrlenW (lpString=".bz2") returned 4
	[0045.998] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0045.998] lstrlenW (lpString=".7z") returned 3
	[0045.998] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0045.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0045.998] lstrlenW (lpString=".dbf") returned 4
	[0045.998] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0045.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0045.998] lstrlenW (lpString=".1cd") returned 4
	[0045.998] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0045.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif") returned 74
	[0045.998] lstrlenW (lpString=".jpg") returned 4
	[0045.998] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0045.998] lstrcmpiW (lpString1=".ini", lpString2=".beets") returned 1
	[0045.998] lstrlenW (lpString="Desktop.ini") returned 11
	[0045.998] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0045.998] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=645) returned 1
	[0045.998] CloseHandle (hObject=0x220) returned 1
	[0045.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26
	[0045.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0045.999] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0045.999] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0045.999] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0045.999] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0045.999] GetLastError () returned 0x0
	[0045.999] ReadFile (in: hFile=0x220, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x285, lpOverlapped=0x0) returned 1
	[0046.000] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x290, lpOverlapped=0x0) returned 1
	[0046.001] ReadFile (in: hFile=0x220, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0046.001] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0046.001] SetEndOfFile (hFile=0x21c) returned 1
	[0046.001] CloseHandle (hObject=0x21c) returned 1
	[0046.002] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.002] SetEndOfFile (hFile=0x220) returned 1
	[0046.003] CloseHandle (hObject=0x220) returned 1
	[0046.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x26) returned 1
	[0046.003] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 1
	[0046.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0046.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0046.003] lstrlenW (lpString=".doc") returned 4
	[0046.003] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0046.003] lstrlenW (lpString=".docx") returned 5
	[0046.003] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0046.003] lstrlenW (lpString=".pdf") returned 4
	[0046.003] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0046.003] lstrlenW (lpString=".xls") returned 4
	[0046.004] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0046.004] lstrlenW (lpString=".xlsx") returned 5
	[0046.004] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0046.004] lstrlenW (lpString=".ppt") returned 4
	[0046.004] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0046.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0046.004] lstrlenW (lpString=".zip") returned 4
	[0046.004] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0046.004] lstrlenW (lpString=".rar") returned 4
	[0046.004] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0046.004] lstrlenW (lpString=".bz2") returned 4
	[0046.004] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0046.004] lstrlenW (lpString=".7z") returned 3
	[0046.004] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0046.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0046.004] lstrlenW (lpString=".dbf") returned 4
	[0046.004] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0046.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0046.004] lstrlenW (lpString=".1cd") returned 4
	[0046.004] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0046.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0046.004] lstrlenW (lpString=".jpg") returned 4
	[0046.004] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0046.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0046.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0046.004] lstrlenW (lpString=".doc") returned 4
	[0046.004] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0046.004] lstrlenW (lpString=".docx") returned 5
	[0046.004] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0046.004] lstrlenW (lpString=".pdf") returned 4
	[0046.004] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0046.004] lstrlenW (lpString=".xls") returned 4
	[0046.005] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0046.005] lstrlenW (lpString=".xlsx") returned 5
	[0046.005] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0046.005] lstrlenW (lpString=".ppt") returned 4
	[0046.005] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0046.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0046.005] lstrlenW (lpString=".zip") returned 4
	[0046.005] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0046.005] lstrlenW (lpString=".rar") returned 4
	[0046.005] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0046.005] lstrlenW (lpString=".bz2") returned 4
	[0046.005] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0046.005] lstrlenW (lpString=".7z") returned 3
	[0046.005] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0046.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0046.005] lstrlenW (lpString=".dbf") returned 4
	[0046.005] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0046.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0046.005] lstrlenW (lpString=".1cd") returned 4
	[0046.005] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0046.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini") returned 69
	[0046.005] lstrlenW (lpString=".jpg") returned 4
	[0046.005] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0046.005] lstrcmpiW (lpString1=".emf", lpString2=".beets") returned 1
	[0046.005] lstrlenW (lpString="Dotted_Lines.emf") returned 16
	[0046.005] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0046.006] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=3792) returned 1
	[0046.006] CloseHandle (hObject=0x220) returned 1
	[0046.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf")) returned 0x20
	[0046.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.006] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0046.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0046.006] lstrlenW (lpString=".doc") returned 4
	[0046.006] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1
	[0046.006] lstrlenW (lpString=".docx") returned 5
	[0046.006] lstrcmpiW (lpString1=".docx", lpString2="s.emf") returned -1
	[0046.006] lstrlenW (lpString=".pdf") returned 4
	[0046.006] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1
	[0046.006] lstrlenW (lpString=".xls") returned 4
	[0046.006] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1
	[0046.006] lstrlenW (lpString=".xlsx") returned 5
	[0046.006] lstrcmpiW (lpString1=".xlsx", lpString2="s.emf") returned -1
	[0046.006] lstrlenW (lpString=".ppt") returned 4
	[0046.006] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1
	[0046.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0046.006] lstrlenW (lpString=".zip") returned 4
	[0046.006] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1
	[0046.006] lstrlenW (lpString=".rar") returned 4
	[0046.007] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1
	[0046.007] lstrlenW (lpString=".bz2") returned 4
	[0046.007] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1
	[0046.007] lstrlenW (lpString=".7z") returned 3
	[0046.007] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1
	[0046.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0046.007] lstrlenW (lpString=".dbf") returned 4
	[0046.007] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1
	[0046.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0046.007] lstrlenW (lpString=".1cd") returned 4
	[0046.007] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1
	[0046.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0046.007] lstrlenW (lpString=".jpg") returned 4
	[0046.007] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1
	[0046.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0046.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0046.007] lstrlenW (lpString=".doc") returned 4
	[0046.007] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1
	[0046.007] lstrlenW (lpString=".docx") returned 5
	[0046.007] lstrcmpiW (lpString1=".docx", lpString2="s.emf") returned -1
	[0046.007] lstrlenW (lpString=".pdf") returned 4
	[0046.007] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1
	[0046.007] lstrlenW (lpString=".xls") returned 4
	[0046.007] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1
	[0046.007] lstrlenW (lpString=".xlsx") returned 5
	[0046.007] lstrcmpiW (lpString1=".xlsx", lpString2="s.emf") returned -1
	[0046.007] lstrlenW (lpString=".ppt") returned 4
	[0046.007] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1
	[0046.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0046.007] lstrlenW (lpString=".zip") returned 4
	[0046.007] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1
	[0046.007] lstrlenW (lpString=".rar") returned 4
	[0046.007] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1
	[0046.008] lstrlenW (lpString=".bz2") returned 4
	[0046.008] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1
	[0046.008] lstrlenW (lpString=".7z") returned 3
	[0046.008] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1
	[0046.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0046.008] lstrlenW (lpString=".dbf") returned 4
	[0046.008] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1
	[0046.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0046.008] lstrlenW (lpString=".1cd") returned 4
	[0046.008] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1
	[0046.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf") returned 74
	[0046.008] lstrlenW (lpString=".jpg") returned 4
	[0046.008] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1
	[0046.008] lstrcmpiW (lpString1=".htm", lpString2=".beets") returned 1
	[0046.008] lstrlenW (lpString="Garden.htm") returned 10
	[0046.008] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0046.008] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=231) returned 1
	[0046.008] CloseHandle (hObject=0x220) returned 1
	[0046.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20
	[0046.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.009] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0046.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0046.009] lstrlenW (lpString=".doc") returned 4
	[0046.009] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0046.009] lstrlenW (lpString=".docx") returned 5
	[0046.009] lstrcmpiW (lpString1=".docx", lpString2="n.htm") returned -1
	[0046.009] lstrlenW (lpString=".pdf") returned 4
	[0046.009] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0046.009] lstrlenW (lpString=".xls") returned 4
	[0046.009] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0046.009] lstrlenW (lpString=".xlsx") returned 5
	[0046.009] lstrcmpiW (lpString1=".xlsx", lpString2="n.htm") returned -1
	[0046.009] lstrlenW (lpString=".ppt") returned 4
	[0046.009] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0046.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0046.009] lstrlenW (lpString=".zip") returned 4
	[0046.009] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0046.009] lstrlenW (lpString=".rar") returned 4
	[0046.009] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0046.009] lstrlenW (lpString=".bz2") returned 4
	[0046.009] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0046.009] lstrlenW (lpString=".7z") returned 3
	[0046.009] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0046.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0046.009] lstrlenW (lpString=".dbf") returned 4
	[0046.009] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0046.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0046.009] lstrlenW (lpString=".1cd") returned 4
	[0046.009] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0046.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0046.010] lstrlenW (lpString=".jpg") returned 4
	[0046.010] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0046.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0046.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0046.010] lstrlenW (lpString=".doc") returned 4
	[0046.010] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0046.010] lstrlenW (lpString=".docx") returned 5
	[0046.010] lstrcmpiW (lpString1=".docx", lpString2="n.htm") returned -1
	[0046.010] lstrlenW (lpString=".pdf") returned 4
	[0046.010] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0046.010] lstrlenW (lpString=".xls") returned 4
	[0046.010] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0046.010] lstrlenW (lpString=".xlsx") returned 5
	[0046.010] lstrcmpiW (lpString1=".xlsx", lpString2="n.htm") returned -1
	[0046.010] lstrlenW (lpString=".ppt") returned 4
	[0046.010] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0046.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0046.010] lstrlenW (lpString=".zip") returned 4
	[0046.010] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0046.010] lstrlenW (lpString=".rar") returned 4
	[0046.010] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0046.010] lstrlenW (lpString=".bz2") returned 4
	[0046.010] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0046.010] lstrlenW (lpString=".7z") returned 3
	[0046.010] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0046.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0046.010] lstrlenW (lpString=".dbf") returned 4
	[0046.010] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0046.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0046.010] lstrlenW (lpString=".1cd") returned 4
	[0046.010] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0046.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 68
	[0046.011] lstrlenW (lpString=".jpg") returned 4
	[0046.011] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0046.011] lstrcmpiW (lpString1=".jpg", lpString2=".beets") returned 1
	[0046.011] lstrlenW (lpString="Garden.jpg") returned 10
	[0046.011] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0046.011] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=23871) returned 1
	[0046.011] CloseHandle (hObject=0x220) returned 1
	[0046.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20
	[0046.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.011] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0046.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0046.011] lstrlenW (lpString=".doc") returned 4
	[0046.011] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0046.011] lstrlenW (lpString=".docx") returned 5
	[0046.011] lstrcmpiW (lpString1=".docx", lpString2="n.jpg") returned -1
	[0046.012] lstrlenW (lpString=".pdf") returned 4
	[0046.012] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0046.012] lstrlenW (lpString=".xls") returned 4
	[0046.012] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0046.012] lstrlenW (lpString=".xlsx") returned 5
	[0046.012] lstrcmpiW (lpString1=".xlsx", lpString2="n.jpg") returned -1
	[0046.012] lstrlenW (lpString=".ppt") returned 4
	[0046.012] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0046.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0046.012] lstrlenW (lpString=".zip") returned 4
	[0046.012] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0046.186] lstrlenW (lpString=".rar") returned 4
	[0046.186] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0046.186] lstrlenW (lpString=".bz2") returned 4
	[0046.186] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0046.186] lstrlenW (lpString=".7z") returned 3
	[0046.187] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0046.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0046.187] lstrlenW (lpString=".dbf") returned 4
	[0046.187] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0046.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0046.187] lstrlenW (lpString=".1cd") returned 4
	[0046.187] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0046.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0046.187] lstrlenW (lpString=".jpg") returned 4
	[0046.187] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0046.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0046.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0046.187] lstrlenW (lpString=".doc") returned 4
	[0046.187] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0046.187] lstrlenW (lpString=".docx") returned 5
	[0046.187] lstrcmpiW (lpString1=".docx", lpString2="n.jpg") returned -1
	[0046.187] lstrlenW (lpString=".pdf") returned 4
	[0046.187] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0046.187] lstrlenW (lpString=".xls") returned 4
	[0046.187] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0046.187] lstrlenW (lpString=".xlsx") returned 5
	[0046.187] lstrcmpiW (lpString1=".xlsx", lpString2="n.jpg") returned -1
	[0046.187] lstrlenW (lpString=".ppt") returned 4
	[0046.187] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0046.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0046.187] lstrlenW (lpString=".zip") returned 4
	[0046.187] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0046.187] lstrlenW (lpString=".rar") returned 4
	[0046.187] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0046.187] lstrlenW (lpString=".bz2") returned 4
	[0046.187] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0046.187] lstrlenW (lpString=".7z") returned 3
	[0046.187] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0046.188] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0046.188] lstrlenW (lpString=".dbf") returned 4
	[0046.188] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0046.188] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0046.188] lstrlenW (lpString=".1cd") returned 4
	[0046.188] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0046.188] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 68
	[0046.188] lstrlenW (lpString=".jpg") returned 4
	[0046.188] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0046.188] lstrcmpiW (lpString1=".emf", lpString2=".beets") returned 1
	[0046.188] lstrlenW (lpString="Genko_1.emf") returned 11
	[0046.188] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0046.667] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=5524) returned 1
	[0046.667] CloseHandle (hObject=0x200) returned 1
	[0046.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf")) returned 0x20
	[0046.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.668] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0046.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69
	[0046.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69
	[0046.668] lstrlenW (lpString=".doc") returned 4
	[0046.668] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1
	[0046.668] lstrlenW (lpString=".docx") returned 5
	[0046.668] lstrcmpiW (lpString1=".docx", lpString2="1.emf") returned -1
	[0046.668] lstrlenW (lpString=".pdf") returned 4
	[0046.668] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1
	[0046.668] lstrlenW (lpString=".xls") returned 4
	[0046.668] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1
	[0046.668] lstrlenW (lpString=".xlsx") returned 5
	[0046.668] lstrcmpiW (lpString1=".xlsx", lpString2="1.emf") returned -1
	[0046.668] lstrlenW (lpString=".ppt") returned 4
	[0046.668] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1
	[0046.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69
	[0046.668] lstrlenW (lpString=".zip") returned 4
	[0046.668] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1
	[0046.668] lstrlenW (lpString=".rar") returned 4
	[0046.668] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1
	[0046.668] lstrlenW (lpString=".bz2") returned 4
	[0046.668] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1
	[0046.669] lstrlenW (lpString=".7z") returned 3
	[0046.669] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1
	[0046.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69
	[0046.669] lstrlenW (lpString=".dbf") returned 4
	[0046.669] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1
	[0046.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69
	[0046.669] lstrlenW (lpString=".1cd") returned 4
	[0046.669] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1
	[0046.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69
	[0046.669] lstrlenW (lpString=".jpg") returned 4
	[0046.669] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1
	[0046.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69
	[0046.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69
	[0046.669] lstrlenW (lpString=".doc") returned 4
	[0046.669] lstrcmpiW (lpString1=".doc", lpString2=".emf") returned -1
	[0046.669] lstrlenW (lpString=".docx") returned 5
	[0046.669] lstrcmpiW (lpString1=".docx", lpString2="1.emf") returned -1
	[0046.669] lstrlenW (lpString=".pdf") returned 4
	[0046.669] lstrcmpiW (lpString1=".pdf", lpString2=".emf") returned 1
	[0046.669] lstrlenW (lpString=".xls") returned 4
	[0046.669] lstrcmpiW (lpString1=".xls", lpString2=".emf") returned 1
	[0046.669] lstrlenW (lpString=".xlsx") returned 5
	[0046.669] lstrcmpiW (lpString1=".xlsx", lpString2="1.emf") returned -1
	[0046.669] lstrlenW (lpString=".ppt") returned 4
	[0046.669] lstrcmpiW (lpString1=".ppt", lpString2=".emf") returned 1
	[0046.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69
	[0046.669] lstrlenW (lpString=".zip") returned 4
	[0046.669] lstrcmpiW (lpString1=".zip", lpString2=".emf") returned 1
	[0046.670] lstrlenW (lpString=".rar") returned 4
	[0046.670] lstrcmpiW (lpString1=".rar", lpString2=".emf") returned 1
	[0046.670] lstrlenW (lpString=".bz2") returned 4
	[0046.670] lstrcmpiW (lpString1=".bz2", lpString2=".emf") returned -1
	[0046.670] lstrlenW (lpString=".7z") returned 3
	[0046.670] lstrcmpiW (lpString1=".7z", lpString2="emf") returned -1
	[0046.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69
	[0046.670] lstrlenW (lpString=".dbf") returned 4
	[0046.670] lstrcmpiW (lpString1=".dbf", lpString2=".emf") returned -1
	[0046.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69
	[0046.670] lstrlenW (lpString=".1cd") returned 4
	[0046.670] lstrcmpiW (lpString1=".1cd", lpString2=".emf") returned -1
	[0046.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf") returned 69
	[0046.670] lstrlenW (lpString=".jpg") returned 4
	[0046.670] lstrcmpiW (lpString1=".jpg", lpString2=".emf") returned 1
	[0046.670] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0046.670] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0046.670] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0047.197] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=34916) returned 1
	[0047.197] CloseHandle (hObject=0x1f8) returned 1
	[0047.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png")) returned 0x20
	[0047.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.200] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0047.207] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.207] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.207] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0047.217] GetLastError () returned 0x0
	[0047.217] ReadFile (in: hFile=0x1f8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x8864, lpOverlapped=0x0) returned 1
	[0047.219] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x8870, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x8870, lpOverlapped=0x0) returned 1
	[0047.221] ReadFile (in: hFile=0x1f8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.221] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0047.221] SetEndOfFile (hFile=0x21c) returned 1
	[0047.221] CloseHandle (hObject=0x21c) returned 1
	[0047.221] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.221] SetEndOfFile (hFile=0x1f8) returned 1
	[0047.222] CloseHandle (hObject=0x1f8) returned 1
	[0047.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.222] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png")) returned 1
	[0047.222] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73
	[0047.222] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73
	[0047.222] lstrlenW (lpString=".doc") returned 4
	[0047.223] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.223] lstrlenW (lpString=".docx") returned 5
	[0047.223] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.223] lstrlenW (lpString=".pdf") returned 4
	[0047.223] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.223] lstrlenW (lpString=".xls") returned 4
	[0047.223] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.223] lstrlenW (lpString=".xlsx") returned 5
	[0047.223] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.223] lstrlenW (lpString=".ppt") returned 4
	[0047.223] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.223] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73
	[0047.223] lstrlenW (lpString=".zip") returned 4
	[0047.223] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.223] lstrlenW (lpString=".rar") returned 4
	[0047.223] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.223] lstrlenW (lpString=".bz2") returned 4
	[0047.223] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.223] lstrlenW (lpString=".7z") returned 3
	[0047.223] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.223] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73
	[0047.223] lstrlenW (lpString=".dbf") returned 4
	[0047.223] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.223] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73
	[0047.223] lstrlenW (lpString=".1cd") returned 4
	[0047.223] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.223] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73
	[0047.223] lstrlenW (lpString=".jpg") returned 4
	[0047.223] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.223] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73
	[0047.223] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73
	[0047.223] lstrlenW (lpString=".doc") returned 4
	[0047.223] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.224] lstrlenW (lpString=".docx") returned 5
	[0047.224] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.224] lstrlenW (lpString=".pdf") returned 4
	[0047.224] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.224] lstrlenW (lpString=".xls") returned 4
	[0047.224] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.224] lstrlenW (lpString=".xlsx") returned 5
	[0047.224] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.224] lstrlenW (lpString=".ppt") returned 4
	[0047.224] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.224] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73
	[0047.224] lstrlenW (lpString=".zip") returned 4
	[0047.224] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.224] lstrlenW (lpString=".rar") returned 4
	[0047.224] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.224] lstrlenW (lpString=".bz2") returned 4
	[0047.224] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.224] lstrlenW (lpString=".7z") returned 3
	[0047.224] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.224] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73
	[0047.224] lstrlenW (lpString=".dbf") returned 4
	[0047.224] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.224] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73
	[0047.224] lstrlenW (lpString=".1cd") returned 4
	[0047.224] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.224] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG") returned 73
	[0047.224] lstrlenW (lpString=".jpg") returned 4
	[0047.224] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.224] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0047.225] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0047.225] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0047.225] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2722) returned 1
	[0047.225] CloseHandle (hObject=0x1f8) returned 1
	[0047.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif")) returned 0x20
	[0047.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.225] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0047.225] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.225] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.225] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0047.227] GetLastError () returned 0x0
	[0047.227] ReadFile (in: hFile=0x1f8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0xaa2, lpOverlapped=0x0) returned 1
	[0047.228] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xab0, lpOverlapped=0x0) returned 1
	[0047.230] ReadFile (in: hFile=0x1f8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.230] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0047.230] SetEndOfFile (hFile=0x21c) returned 1
	[0047.230] CloseHandle (hObject=0x21c) returned 1
	[0047.230] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.230] SetEndOfFile (hFile=0x1f8) returned 1
	[0047.231] CloseHandle (hObject=0x1f8) returned 1
	[0047.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.231] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif")) returned 1
	[0047.231] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74
	[0047.231] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74
	[0047.231] lstrlenW (lpString=".doc") returned 4
	[0047.231] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.231] lstrlenW (lpString=".docx") returned 5
	[0047.231] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.231] lstrlenW (lpString=".pdf") returned 4
	[0047.232] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.232] lstrlenW (lpString=".xls") returned 4
	[0047.232] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.232] lstrlenW (lpString=".xlsx") returned 5
	[0047.232] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.232] lstrlenW (lpString=".ppt") returned 4
	[0047.232] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.232] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74
	[0047.232] lstrlenW (lpString=".zip") returned 4
	[0047.232] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.232] lstrlenW (lpString=".rar") returned 4
	[0047.232] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.232] lstrlenW (lpString=".bz2") returned 4
	[0047.232] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.232] lstrlenW (lpString=".7z") returned 3
	[0047.232] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.232] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74
	[0047.232] lstrlenW (lpString=".dbf") returned 4
	[0047.232] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.232] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74
	[0047.232] lstrlenW (lpString=".1cd") returned 4
	[0047.232] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.232] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74
	[0047.232] lstrlenW (lpString=".jpg") returned 4
	[0047.232] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.232] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74
	[0047.232] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74
	[0047.232] lstrlenW (lpString=".doc") returned 4
	[0047.232] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.232] lstrlenW (lpString=".docx") returned 5
	[0047.232] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.232] lstrlenW (lpString=".pdf") returned 4
	[0047.233] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.233] lstrlenW (lpString=".xls") returned 4
	[0047.233] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.233] lstrlenW (lpString=".xlsx") returned 5
	[0047.233] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.233] lstrlenW (lpString=".ppt") returned 4
	[0047.233] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.233] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74
	[0047.233] lstrlenW (lpString=".zip") returned 4
	[0047.233] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.233] lstrlenW (lpString=".rar") returned 4
	[0047.233] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.233] lstrlenW (lpString=".bz2") returned 4
	[0047.233] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.233] lstrlenW (lpString=".7z") returned 3
	[0047.233] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.233] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74
	[0047.233] lstrlenW (lpString=".dbf") returned 4
	[0047.233] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.233] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74
	[0047.233] lstrlenW (lpString=".1cd") returned 4
	[0047.233] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.233] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF") returned 74
	[0047.233] lstrlenW (lpString=".jpg") returned 4
	[0047.233] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.233] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0047.233] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0047.233] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0047.234] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=43276) returned 1
	[0047.234] CloseHandle (hObject=0x1f8) returned 1
	[0047.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png")) returned 0x20
	[0047.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.235] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0047.235] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.235] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.235] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0047.235] GetLastError () returned 0x0
	[0047.235] ReadFile (in: hFile=0x1f8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0xa90c, lpOverlapped=0x0) returned 1
	[0047.239] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xa910, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xa910, lpOverlapped=0x0) returned 1
	[0047.240] ReadFile (in: hFile=0x1f8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.240] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0047.240] SetEndOfFile (hFile=0x21c) returned 1
	[0047.241] CloseHandle (hObject=0x21c) returned 1
	[0047.241] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.241] SetEndOfFile (hFile=0x1f8) returned 1
	[0047.242] CloseHandle (hObject=0x1f8) returned 1
	[0047.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.242] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png")) returned 1
	[0047.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75
	[0047.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75
	[0047.242] lstrlenW (lpString=".doc") returned 4
	[0047.242] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.242] lstrlenW (lpString=".docx") returned 5
	[0047.243] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.243] lstrlenW (lpString=".pdf") returned 4
	[0047.243] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.243] lstrlenW (lpString=".xls") returned 4
	[0047.243] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.243] lstrlenW (lpString=".xlsx") returned 5
	[0047.243] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.243] lstrlenW (lpString=".ppt") returned 4
	[0047.243] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75
	[0047.243] lstrlenW (lpString=".zip") returned 4
	[0047.243] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.243] lstrlenW (lpString=".rar") returned 4
	[0047.243] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.243] lstrlenW (lpString=".bz2") returned 4
	[0047.243] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.243] lstrlenW (lpString=".7z") returned 3
	[0047.243] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75
	[0047.243] lstrlenW (lpString=".dbf") returned 4
	[0047.243] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75
	[0047.243] lstrlenW (lpString=".1cd") returned 4
	[0047.243] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75
	[0047.243] lstrlenW (lpString=".jpg") returned 4
	[0047.243] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75
	[0047.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75
	[0047.243] lstrlenW (lpString=".doc") returned 4
	[0047.243] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0047.243] lstrlenW (lpString=".docx") returned 5
	[0047.243] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0047.244] lstrlenW (lpString=".pdf") returned 4
	[0047.244] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0047.244] lstrlenW (lpString=".xls") returned 4
	[0047.244] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0047.244] lstrlenW (lpString=".xlsx") returned 5
	[0047.244] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0047.244] lstrlenW (lpString=".ppt") returned 4
	[0047.244] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0047.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75
	[0047.244] lstrlenW (lpString=".zip") returned 4
	[0047.244] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0047.244] lstrlenW (lpString=".rar") returned 4
	[0047.244] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0047.244] lstrlenW (lpString=".bz2") returned 4
	[0047.244] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0047.244] lstrlenW (lpString=".7z") returned 3
	[0047.244] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0047.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75
	[0047.244] lstrlenW (lpString=".dbf") returned 4
	[0047.244] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0047.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75
	[0047.244] lstrlenW (lpString=".1cd") returned 4
	[0047.244] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0047.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG") returned 75
	[0047.244] lstrlenW (lpString=".jpg") returned 4
	[0047.244] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0047.244] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0047.245] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0047.245] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0047.245] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=945) returned 1
	[0047.245] CloseHandle (hObject=0x1f8) returned 1
	[0047.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif")) returned 0x20
	[0047.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.245] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0047.245] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.245] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.245] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0047.247] GetLastError () returned 0x0
	[0047.247] ReadFile (in: hFile=0x1f8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x3b1, lpOverlapped=0x0) returned 1
	[0047.257] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x3c0, lpOverlapped=0x0) returned 1
	[0047.258] ReadFile (in: hFile=0x1f8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.258] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0047.259] SetEndOfFile (hFile=0x21c) returned 1
	[0047.259] CloseHandle (hObject=0x21c) returned 1
	[0047.259] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.259] SetEndOfFile (hFile=0x1f8) returned 1
	[0047.260] CloseHandle (hObject=0x1f8) returned 1
	[0047.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0047.260] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif")) returned 1
	[0047.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74
	[0047.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74
	[0047.260] lstrlenW (lpString=".doc") returned 4
	[0047.260] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.260] lstrlenW (lpString=".docx") returned 5
	[0047.260] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.260] lstrlenW (lpString=".pdf") returned 4
	[0047.260] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.260] lstrlenW (lpString=".xls") returned 4
	[0047.260] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.260] lstrlenW (lpString=".xlsx") returned 5
	[0047.260] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.260] lstrlenW (lpString=".ppt") returned 4
	[0047.260] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74
	[0047.261] lstrlenW (lpString=".zip") returned 4
	[0047.261] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.261] lstrlenW (lpString=".rar") returned 4
	[0047.261] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.261] lstrlenW (lpString=".bz2") returned 4
	[0047.261] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.261] lstrlenW (lpString=".7z") returned 3
	[0047.261] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.261] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74
	[0047.261] lstrlenW (lpString=".dbf") returned 4
	[0047.261] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.261] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74
	[0047.261] lstrlenW (lpString=".1cd") returned 4
	[0047.261] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.261] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74
	[0047.261] lstrlenW (lpString=".jpg") returned 4
	[0047.261] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.261] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74
	[0047.261] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74
	[0047.261] lstrlenW (lpString=".doc") returned 4
	[0047.261] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0047.261] lstrlenW (lpString=".docx") returned 5
	[0047.261] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0047.261] lstrlenW (lpString=".pdf") returned 4
	[0047.261] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0047.261] lstrlenW (lpString=".xls") returned 4
	[0047.261] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0047.261] lstrlenW (lpString=".xlsx") returned 5
	[0047.261] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0047.261] lstrlenW (lpString=".ppt") returned 4
	[0047.261] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0047.261] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74
	[0047.262] lstrlenW (lpString=".zip") returned 4
	[0047.262] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0047.262] lstrlenW (lpString=".rar") returned 4
	[0047.262] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0047.262] lstrlenW (lpString=".bz2") returned 4
	[0047.262] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0047.262] lstrlenW (lpString=".7z") returned 3
	[0047.262] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0047.262] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74
	[0047.262] lstrlenW (lpString=".dbf") returned 4
	[0047.262] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0047.262] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74
	[0047.262] lstrlenW (lpString=".1cd") returned 4
	[0047.262] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0047.262] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF") returned 74
	[0047.262] lstrlenW (lpString=".jpg") returned 4
	[0047.262] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0047.262] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0047.262] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0047.262] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0048.060] GetFileSizeEx (in: hFile=0x220, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2044) returned 1
	[0048.060] CloseHandle (hObject=0x220) returned 1
	[0048.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif")) returned 0x20
	[0048.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.060] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0048.060] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.060] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.061] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0048.221] GetLastError () returned 0x0
	[0048.221] ReadFile (in: hFile=0x220, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x7fc, lpOverlapped=0x0) returned 1
	[0048.382] WriteFile (in: hFile=0x210, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x800, lpOverlapped=0x0) returned 1
	[0048.383] ReadFile (in: hFile=0x220, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.383] WriteFile (in: hFile=0x210, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0048.383] SetEndOfFile (hFile=0x210) returned 1
	[0048.384] CloseHandle (hObject=0x210) returned 1
	[0048.384] SetFilePointerEx (in: hFile=0x220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.384] SetEndOfFile (hFile=0x220) returned 1
	[0048.384] CloseHandle (hObject=0x220) returned 1
	[0048.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0048.385] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif")) returned 1
	[0048.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76
	[0048.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76
	[0048.385] lstrlenW (lpString=".doc") returned 4
	[0048.385] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0048.385] lstrlenW (lpString=".docx") returned 5
	[0048.385] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0048.385] lstrlenW (lpString=".pdf") returned 4
	[0048.385] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0048.385] lstrlenW (lpString=".xls") returned 4
	[0048.385] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0048.385] lstrlenW (lpString=".xlsx") returned 5
	[0048.385] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0048.385] lstrlenW (lpString=".ppt") returned 4
	[0048.385] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0048.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76
	[0048.385] lstrlenW (lpString=".zip") returned 4
	[0048.385] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0048.385] lstrlenW (lpString=".rar") returned 4
	[0048.385] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0048.385] lstrlenW (lpString=".bz2") returned 4
	[0048.385] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0048.386] lstrlenW (lpString=".7z") returned 3
	[0048.386] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0048.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76
	[0048.386] lstrlenW (lpString=".dbf") returned 4
	[0048.386] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0048.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76
	[0048.386] lstrlenW (lpString=".1cd") returned 4
	[0048.386] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0048.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76
	[0048.386] lstrlenW (lpString=".jpg") returned 4
	[0048.386] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0048.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76
	[0048.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76
	[0048.386] lstrlenW (lpString=".doc") returned 4
	[0048.386] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0048.386] lstrlenW (lpString=".docx") returned 5
	[0048.386] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0048.386] lstrlenW (lpString=".pdf") returned 4
	[0048.386] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0048.386] lstrlenW (lpString=".xls") returned 4
	[0048.386] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0048.386] lstrlenW (lpString=".xlsx") returned 5
	[0048.386] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0048.386] lstrlenW (lpString=".ppt") returned 4
	[0048.386] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0048.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76
	[0048.386] lstrlenW (lpString=".zip") returned 4
	[0048.386] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0048.386] lstrlenW (lpString=".rar") returned 4
	[0048.386] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0048.386] lstrlenW (lpString=".bz2") returned 4
	[0048.386] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0048.386] lstrlenW (lpString=".7z") returned 3
	[0048.386] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0048.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76
	[0048.386] lstrlenW (lpString=".dbf") returned 4
	[0048.386] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0048.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76
	[0048.387] lstrlenW (lpString=".1cd") returned 4
	[0048.387] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0048.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF") returned 76
	[0048.387] lstrlenW (lpString=".jpg") returned 4
	[0048.387] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0048.387] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0048.387] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0048.387] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0048.496] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=26402) returned 1
	[0048.496] CloseHandle (hObject=0x1f8) returned 1
	[0048.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png")) returned 0x20
	[0048.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.496] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0048.496] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.496] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.496] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0048.497] GetLastError () returned 0x0
	[0048.497] ReadFile (in: hFile=0x1f8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x6722, lpOverlapped=0x0) returned 1
	[0048.516] WriteFile (in: hFile=0x1e0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x6730, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x6730, lpOverlapped=0x0) returned 1
	[0048.768] ReadFile (in: hFile=0x1f8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.771] WriteFile (in: hFile=0x1e0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0048.776] SetEndOfFile (hFile=0x1e0) returned 1
	[0048.784] CloseHandle (hObject=0x1e0) returned 1
	[0048.788] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.788] SetEndOfFile (hFile=0x1f8) returned 1
	[0048.824] CloseHandle (hObject=0x1f8) returned 1
	[0048.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0048.840] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png")) returned 1
	[0048.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73
	[0048.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73
	[0048.849] lstrlenW (lpString=".doc") returned 4
	[0048.850] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0048.852] lstrlenW (lpString=".docx") returned 5
	[0048.853] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0048.854] lstrlenW (lpString=".pdf") returned 4
	[0048.854] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0048.857] lstrlenW (lpString=".xls") returned 4
	[0048.857] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0048.858] lstrlenW (lpString=".xlsx") returned 5
	[0048.859] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0048.859] lstrlenW (lpString=".ppt") returned 4
	[0048.859] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0048.860] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73
	[0048.860] lstrlenW (lpString=".zip") returned 4
	[0048.860] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0048.860] lstrlenW (lpString=".rar") returned 4
	[0048.863] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0048.865] lstrlenW (lpString=".bz2") returned 4
	[0048.866] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0048.867] lstrlenW (lpString=".7z") returned 3
	[0048.867] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0048.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73
	[0048.870] lstrlenW (lpString=".dbf") returned 4
	[0048.870] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0048.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73
	[0048.871] lstrlenW (lpString=".1cd") returned 4
	[0048.873] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0048.873] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73
	[0048.873] lstrlenW (lpString=".jpg") returned 4
	[0048.874] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0048.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73
	[0048.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73
	[0048.880] lstrlenW (lpString=".doc") returned 4
	[0048.881] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0048.884] lstrlenW (lpString=".docx") returned 5
	[0048.885] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0048.885] lstrlenW (lpString=".pdf") returned 4
	[0048.885] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0048.895] lstrlenW (lpString=".xls") returned 4
	[0048.896] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0048.899] lstrlenW (lpString=".xlsx") returned 5
	[0048.899] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0048.899] lstrlenW (lpString=".ppt") returned 4
	[0048.902] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0048.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73
	[0048.902] lstrlenW (lpString=".zip") returned 4
	[0048.904] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0048.905] lstrlenW (lpString=".rar") returned 4
	[0048.905] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0048.905] lstrlenW (lpString=".bz2") returned 4
	[0048.905] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0048.905] lstrlenW (lpString=".7z") returned 3
	[0048.906] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0048.908] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73
	[0048.908] lstrlenW (lpString=".dbf") returned 4
	[0048.908] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0048.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73
	[0048.911] lstrlenW (lpString=".1cd") returned 4
	[0048.912] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0048.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG") returned 73
	[0048.915] lstrlenW (lpString=".jpg") returned 4
	[0048.916] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0049.085] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0049.085] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0049.085] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0049.085] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=5120) returned 1
	[0049.085] CloseHandle (hObject=0x218) returned 1
	[0049.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif")) returned 0x20
	[0049.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.085] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0049.086] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.086] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.086] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0049.119] GetLastError () returned 0x0
	[0049.119] ReadFile (in: hFile=0x218, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x1400, lpOverlapped=0x0) returned 1
	[0049.123] WriteFile (in: hFile=0x1f8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x1410, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x1410, lpOverlapped=0x0) returned 1
	[0049.124] ReadFile (in: hFile=0x218, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.124] WriteFile (in: hFile=0x1f8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0049.124] SetEndOfFile (hFile=0x1f8) returned 1
	[0049.127] CloseHandle (hObject=0x1f8) returned 1
	[0049.127] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.127] SetEndOfFile (hFile=0x218) returned 1
	[0049.128] CloseHandle (hObject=0x218) returned 1
	[0049.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0049.128] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif")) returned 1
	[0049.128] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76
	[0049.128] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76
	[0049.128] lstrlenW (lpString=".doc") returned 4
	[0049.128] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0049.128] lstrlenW (lpString=".docx") returned 5
	[0049.128] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0049.129] lstrlenW (lpString=".pdf") returned 4
	[0049.129] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0049.129] lstrlenW (lpString=".xls") returned 4
	[0049.129] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0049.129] lstrlenW (lpString=".xlsx") returned 5
	[0049.129] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0049.129] lstrlenW (lpString=".ppt") returned 4
	[0049.129] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0049.129] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76
	[0049.129] lstrlenW (lpString=".zip") returned 4
	[0049.129] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0049.129] lstrlenW (lpString=".rar") returned 4
	[0049.129] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0049.129] lstrlenW (lpString=".bz2") returned 4
	[0049.129] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0049.129] lstrlenW (lpString=".7z") returned 3
	[0049.129] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0049.129] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76
	[0049.129] lstrlenW (lpString=".dbf") returned 4
	[0049.129] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0049.129] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76
	[0049.129] lstrlenW (lpString=".1cd") returned 4
	[0049.129] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0049.129] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76
	[0049.129] lstrlenW (lpString=".jpg") returned 4
	[0049.129] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0049.129] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76
	[0049.129] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76
	[0049.129] lstrlenW (lpString=".doc") returned 4
	[0049.129] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0049.129] lstrlenW (lpString=".docx") returned 5
	[0049.129] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0049.130] lstrlenW (lpString=".pdf") returned 4
	[0049.130] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0049.130] lstrlenW (lpString=".xls") returned 4
	[0049.130] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0049.130] lstrlenW (lpString=".xlsx") returned 5
	[0049.130] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0049.130] lstrlenW (lpString=".ppt") returned 4
	[0049.130] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0049.130] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76
	[0049.130] lstrlenW (lpString=".zip") returned 4
	[0049.130] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0049.130] lstrlenW (lpString=".rar") returned 4
	[0049.130] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0049.130] lstrlenW (lpString=".bz2") returned 4
	[0049.130] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0049.130] lstrlenW (lpString=".7z") returned 3
	[0049.130] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0049.130] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76
	[0049.130] lstrlenW (lpString=".dbf") returned 4
	[0049.130] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0049.130] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76
	[0049.130] lstrlenW (lpString=".1cd") returned 4
	[0049.130] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0049.130] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF") returned 76
	[0049.130] lstrlenW (lpString=".jpg") returned 4
	[0049.130] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0049.130] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0049.130] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0049.130] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0049.131] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2552) returned 1
	[0049.131] CloseHandle (hObject=0x218) returned 1
	[0049.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif")) returned 0x20
	[0049.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.131] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0049.131] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.131] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.131] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0049.469] GetLastError () returned 0x0
	[0049.469] ReadFile (in: hFile=0x218, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x9f8, lpOverlapped=0x0) returned 1
	[0049.470] WriteFile (in: hFile=0x1e0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xa00, lpOverlapped=0x0) returned 1
	[0049.473] ReadFile (in: hFile=0x218, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.473] WriteFile (in: hFile=0x1e0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0049.473] SetEndOfFile (hFile=0x1e0) returned 1
	[0049.473] CloseHandle (hObject=0x1e0) returned 1
	[0049.474] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.474] SetEndOfFile (hFile=0x218) returned 1
	[0049.474] CloseHandle (hObject=0x218) returned 1
	[0049.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0049.475] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif")) returned 1
	[0049.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71
	[0049.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71
	[0049.475] lstrlenW (lpString=".doc") returned 4
	[0049.475] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0049.475] lstrlenW (lpString=".docx") returned 5
	[0049.475] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0049.475] lstrlenW (lpString=".pdf") returned 4
	[0049.475] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0049.475] lstrlenW (lpString=".xls") returned 4
	[0049.475] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0049.475] lstrlenW (lpString=".xlsx") returned 5
	[0049.475] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0049.475] lstrlenW (lpString=".ppt") returned 4
	[0049.475] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0049.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71
	[0049.475] lstrlenW (lpString=".zip") returned 4
	[0049.476] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0049.476] lstrlenW (lpString=".rar") returned 4
	[0049.476] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0049.476] lstrlenW (lpString=".bz2") returned 4
	[0049.476] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0049.476] lstrlenW (lpString=".7z") returned 3
	[0049.476] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0049.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71
	[0049.476] lstrlenW (lpString=".dbf") returned 4
	[0049.476] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0049.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71
	[0049.476] lstrlenW (lpString=".1cd") returned 4
	[0049.476] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0049.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71
	[0049.476] lstrlenW (lpString=".jpg") returned 4
	[0049.476] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0049.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71
	[0049.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71
	[0049.476] lstrlenW (lpString=".doc") returned 4
	[0049.476] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0049.476] lstrlenW (lpString=".docx") returned 5
	[0049.476] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0049.476] lstrlenW (lpString=".pdf") returned 4
	[0049.476] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0049.476] lstrlenW (lpString=".xls") returned 4
	[0049.476] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0049.476] lstrlenW (lpString=".xlsx") returned 5
	[0049.476] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0049.476] lstrlenW (lpString=".ppt") returned 4
	[0049.476] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0049.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71
	[0049.476] lstrlenW (lpString=".zip") returned 4
	[0049.477] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0049.477] lstrlenW (lpString=".rar") returned 4
	[0049.477] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0049.477] lstrlenW (lpString=".bz2") returned 4
	[0049.477] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0049.477] lstrlenW (lpString=".7z") returned 3
	[0049.477] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0049.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71
	[0049.477] lstrlenW (lpString=".dbf") returned 4
	[0049.477] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0049.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71
	[0049.477] lstrlenW (lpString=".1cd") returned 4
	[0049.477] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0049.477] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF") returned 71
	[0049.477] lstrlenW (lpString=".jpg") returned 4
	[0049.477] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0049.477] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0049.477] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0049.477] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0050.472] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=33559) returned 1
	[0050.472] CloseHandle (hObject=0x1e4) returned 1
	[0050.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png")) returned 0x20
	[0050.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.472] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0050.473] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.473] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.473] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0050.473] GetLastError () returned 0x0
	[0050.473] ReadFile (in: hFile=0x1e4, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x8317, lpOverlapped=0x0) returned 1
	[0050.475] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x8320, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x8320, lpOverlapped=0x0) returned 1
	[0050.477] ReadFile (in: hFile=0x1e4, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.477] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0050.477] SetEndOfFile (hFile=0x1d8) returned 1
	[0050.477] CloseHandle (hObject=0x1d8) returned 1
	[0050.477] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.477] SetEndOfFile (hFile=0x1e4) returned 1
	[0050.478] CloseHandle (hObject=0x1e4) returned 1
	[0050.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.478] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png")) returned 1
	[0050.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75
	[0050.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75
	[0050.479] lstrlenW (lpString=".doc") returned 4
	[0050.479] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.479] lstrlenW (lpString=".docx") returned 5
	[0050.479] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.479] lstrlenW (lpString=".pdf") returned 4
	[0050.479] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.479] lstrlenW (lpString=".xls") returned 4
	[0050.479] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.479] lstrlenW (lpString=".xlsx") returned 5
	[0050.479] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.479] lstrlenW (lpString=".ppt") returned 4
	[0050.479] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75
	[0050.479] lstrlenW (lpString=".zip") returned 4
	[0050.479] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.479] lstrlenW (lpString=".rar") returned 4
	[0050.479] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.479] lstrlenW (lpString=".bz2") returned 4
	[0050.479] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.479] lstrlenW (lpString=".7z") returned 3
	[0050.479] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75
	[0050.479] lstrlenW (lpString=".dbf") returned 4
	[0050.479] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75
	[0050.479] lstrlenW (lpString=".1cd") returned 4
	[0050.479] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.479] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75
	[0050.480] lstrlenW (lpString=".jpg") returned 4
	[0050.480] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75
	[0050.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75
	[0050.480] lstrlenW (lpString=".doc") returned 4
	[0050.480] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.480] lstrlenW (lpString=".docx") returned 5
	[0050.480] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.480] lstrlenW (lpString=".pdf") returned 4
	[0050.480] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.480] lstrlenW (lpString=".xls") returned 4
	[0050.480] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.480] lstrlenW (lpString=".xlsx") returned 5
	[0050.480] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.480] lstrlenW (lpString=".ppt") returned 4
	[0050.480] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75
	[0050.480] lstrlenW (lpString=".zip") returned 4
	[0050.480] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.480] lstrlenW (lpString=".rar") returned 4
	[0050.480] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.480] lstrlenW (lpString=".bz2") returned 4
	[0050.480] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.480] lstrlenW (lpString=".7z") returned 3
	[0050.480] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75
	[0050.480] lstrlenW (lpString=".dbf") returned 4
	[0050.480] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75
	[0050.480] lstrlenW (lpString=".1cd") returned 4
	[0050.480] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG") returned 75
	[0050.481] lstrlenW (lpString=".jpg") returned 4
	[0050.481] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.481] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0050.481] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0050.481] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0050.481] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=11573) returned 1
	[0050.481] CloseHandle (hObject=0x1e4) returned 1
	[0050.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png")) returned 0x20
	[0050.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.481] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0050.481] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.482] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.482] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0050.482] GetLastError () returned 0x0
	[0050.482] ReadFile (in: hFile=0x1e4, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x2d35, lpOverlapped=0x0) returned 1
	[0050.554] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x2d40, lpOverlapped=0x0) returned 1
	[0050.556] ReadFile (in: hFile=0x1e4, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.556] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0050.556] SetEndOfFile (hFile=0x1d8) returned 1
	[0050.556] CloseHandle (hObject=0x1d8) returned 1
	[0050.556] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.556] SetEndOfFile (hFile=0x1e4) returned 1
	[0050.557] CloseHandle (hObject=0x1e4) returned 1
	[0050.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.557] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png")) returned 1
	[0050.557] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76
	[0050.557] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76
	[0050.557] lstrlenW (lpString=".doc") returned 4
	[0050.557] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.558] lstrlenW (lpString=".docx") returned 5
	[0050.558] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.558] lstrlenW (lpString=".pdf") returned 4
	[0050.558] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.558] lstrlenW (lpString=".xls") returned 4
	[0050.558] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.558] lstrlenW (lpString=".xlsx") returned 5
	[0050.558] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.558] lstrlenW (lpString=".ppt") returned 4
	[0050.558] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.558] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76
	[0050.558] lstrlenW (lpString=".zip") returned 4
	[0050.558] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.558] lstrlenW (lpString=".rar") returned 4
	[0050.558] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.558] lstrlenW (lpString=".bz2") returned 4
	[0050.558] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.558] lstrlenW (lpString=".7z") returned 3
	[0050.558] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.558] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76
	[0050.558] lstrlenW (lpString=".dbf") returned 4
	[0050.558] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.558] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76
	[0050.558] lstrlenW (lpString=".1cd") returned 4
	[0050.558] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.558] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76
	[0050.558] lstrlenW (lpString=".jpg") returned 4
	[0050.558] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.558] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76
	[0050.558] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76
	[0050.558] lstrlenW (lpString=".doc") returned 4
	[0050.558] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.559] lstrlenW (lpString=".docx") returned 5
	[0050.559] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.559] lstrlenW (lpString=".pdf") returned 4
	[0050.559] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.559] lstrlenW (lpString=".xls") returned 4
	[0050.559] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.559] lstrlenW (lpString=".xlsx") returned 5
	[0050.559] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.559] lstrlenW (lpString=".ppt") returned 4
	[0050.559] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.559] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76
	[0050.559] lstrlenW (lpString=".zip") returned 4
	[0050.559] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.559] lstrlenW (lpString=".rar") returned 4
	[0050.559] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.559] lstrlenW (lpString=".bz2") returned 4
	[0050.559] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.559] lstrlenW (lpString=".7z") returned 3
	[0050.559] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.559] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76
	[0050.559] lstrlenW (lpString=".dbf") returned 4
	[0050.559] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.559] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76
	[0050.559] lstrlenW (lpString=".1cd") returned 4
	[0050.559] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.559] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG") returned 76
	[0050.559] lstrlenW (lpString=".jpg") returned 4
	[0050.559] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.560] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0050.560] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0050.560] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0050.865] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=16738) returned 1
	[0050.865] CloseHandle (hObject=0x224) returned 1
	[0050.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png")) returned 0x20
	[0050.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.865] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0050.865] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.865] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.865] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0050.866] GetLastError () returned 0x0
	[0050.866] ReadFile (in: hFile=0x224, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x4162, lpOverlapped=0x0) returned 1
	[0050.868] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x4170, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x4170, lpOverlapped=0x0) returned 1
	[0050.869] ReadFile (in: hFile=0x224, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.870] WriteFile (in: hFile=0x21c, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0050.870] SetEndOfFile (hFile=0x21c) returned 1
	[0050.870] CloseHandle (hObject=0x21c) returned 1
	[0050.870] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.870] SetEndOfFile (hFile=0x224) returned 1
	[0050.871] CloseHandle (hObject=0x224) returned 1
	[0050.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0050.871] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png")) returned 1
	[0050.871] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76
	[0050.871] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76
	[0050.871] lstrlenW (lpString=".doc") returned 4
	[0050.871] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.872] lstrlenW (lpString=".docx") returned 5
	[0050.872] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.872] lstrlenW (lpString=".pdf") returned 4
	[0050.872] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.872] lstrlenW (lpString=".xls") returned 4
	[0050.872] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.872] lstrlenW (lpString=".xlsx") returned 5
	[0050.872] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.872] lstrlenW (lpString=".ppt") returned 4
	[0050.872] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76
	[0050.872] lstrlenW (lpString=".zip") returned 4
	[0050.872] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.872] lstrlenW (lpString=".rar") returned 4
	[0050.872] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.872] lstrlenW (lpString=".bz2") returned 4
	[0050.872] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.872] lstrlenW (lpString=".7z") returned 3
	[0050.872] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76
	[0050.872] lstrlenW (lpString=".dbf") returned 4
	[0050.872] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76
	[0050.872] lstrlenW (lpString=".1cd") returned 4
	[0050.872] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76
	[0050.872] lstrlenW (lpString=".jpg") returned 4
	[0050.872] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76
	[0050.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76
	[0050.872] lstrlenW (lpString=".doc") returned 4
	[0050.873] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0050.873] lstrlenW (lpString=".docx") returned 5
	[0050.873] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0050.873] lstrlenW (lpString=".pdf") returned 4
	[0050.873] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0050.873] lstrlenW (lpString=".xls") returned 4
	[0050.873] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0050.873] lstrlenW (lpString=".xlsx") returned 5
	[0050.873] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0050.873] lstrlenW (lpString=".ppt") returned 4
	[0050.873] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0050.873] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76
	[0050.873] lstrlenW (lpString=".zip") returned 4
	[0050.873] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0050.873] lstrlenW (lpString=".rar") returned 4
	[0050.873] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0050.873] lstrlenW (lpString=".bz2") returned 4
	[0050.873] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0050.873] lstrlenW (lpString=".7z") returned 3
	[0050.873] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0050.873] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76
	[0050.873] lstrlenW (lpString=".dbf") returned 4
	[0050.873] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0050.873] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76
	[0050.873] lstrlenW (lpString=".1cd") returned 4
	[0050.873] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0050.873] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG") returned 76
	[0050.873] lstrlenW (lpString=".jpg") returned 4
	[0050.873] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0050.873] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0050.874] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0050.874] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0050.874] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=1423) returned 1
	[0050.874] CloseHandle (hObject=0x224) returned 1
	[0050.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif")) returned 0x20
	[0050.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.874] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0050.874] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.874] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.874] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0051.585] GetLastError () returned 0x0
	[0051.585] ReadFile (in: hFile=0x224, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x58f, lpOverlapped=0x0) returned 1
	[0051.800] WriteFile (in: hFile=0x1b8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x590, lpOverlapped=0x0) returned 1
	[0051.801] ReadFile (in: hFile=0x224, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.801] WriteFile (in: hFile=0x1b8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0051.801] SetEndOfFile (hFile=0x1b8) returned 1
	[0051.801] CloseHandle (hObject=0x1b8) returned 1
	[0051.801] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.801] SetEndOfFile (hFile=0x224) returned 1
	[0051.802] CloseHandle (hObject=0x224) returned 1
	[0051.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.802] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif")) returned 1
	[0051.802] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75
	[0051.802] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75
	[0051.802] lstrlenW (lpString=".doc") returned 4
	[0051.803] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.803] lstrlenW (lpString=".docx") returned 5
	[0051.803] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.803] lstrlenW (lpString=".pdf") returned 4
	[0051.803] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.803] lstrlenW (lpString=".xls") returned 4
	[0051.803] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.803] lstrlenW (lpString=".xlsx") returned 5
	[0051.803] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.803] lstrlenW (lpString=".ppt") returned 4
	[0051.803] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75
	[0051.803] lstrlenW (lpString=".zip") returned 4
	[0051.803] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.803] lstrlenW (lpString=".rar") returned 4
	[0051.803] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.803] lstrlenW (lpString=".bz2") returned 4
	[0051.803] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.803] lstrlenW (lpString=".7z") returned 3
	[0051.803] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75
	[0051.803] lstrlenW (lpString=".dbf") returned 4
	[0051.803] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75
	[0051.803] lstrlenW (lpString=".1cd") returned 4
	[0051.803] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75
	[0051.803] lstrlenW (lpString=".jpg") returned 4
	[0051.803] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75
	[0051.803] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75
	[0051.803] lstrlenW (lpString=".doc") returned 4
	[0051.804] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.804] lstrlenW (lpString=".docx") returned 5
	[0051.804] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.804] lstrlenW (lpString=".pdf") returned 4
	[0051.804] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.804] lstrlenW (lpString=".xls") returned 4
	[0051.804] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.804] lstrlenW (lpString=".xlsx") returned 5
	[0051.804] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.804] lstrlenW (lpString=".ppt") returned 4
	[0051.804] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75
	[0051.804] lstrlenW (lpString=".zip") returned 4
	[0051.804] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.804] lstrlenW (lpString=".rar") returned 4
	[0051.804] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.804] lstrlenW (lpString=".bz2") returned 4
	[0051.804] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.804] lstrlenW (lpString=".7z") returned 3
	[0051.804] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75
	[0051.804] lstrlenW (lpString=".dbf") returned 4
	[0051.804] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75
	[0051.804] lstrlenW (lpString=".1cd") returned 4
	[0051.804] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF") returned 75
	[0051.804] lstrlenW (lpString=".jpg") returned 4
	[0051.804] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.804] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0051.805] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0051.805] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0051.807] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2209) returned 1
	[0051.807] CloseHandle (hObject=0x1b8) returned 1
	[0051.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif")) returned 0x20
	[0051.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0051.808] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.808] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.808] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0051.811] GetLastError () returned 0x0
	[0051.811] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x8a1, lpOverlapped=0x0) returned 1
	[0051.816] WriteFile (in: hFile=0x224, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x8b0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x8b0, lpOverlapped=0x0) returned 1
	[0051.817] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.817] WriteFile (in: hFile=0x224, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0051.818] SetEndOfFile (hFile=0x224) returned 1
	[0051.818] CloseHandle (hObject=0x224) returned 1
	[0051.818] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.818] SetEndOfFile (hFile=0x1b8) returned 1
	[0051.819] CloseHandle (hObject=0x1b8) returned 1
	[0051.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.819] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif")) returned 1
	[0051.820] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74
	[0051.820] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74
	[0051.820] lstrlenW (lpString=".doc") returned 4
	[0051.820] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.820] lstrlenW (lpString=".docx") returned 5
	[0051.820] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.820] lstrlenW (lpString=".pdf") returned 4
	[0051.820] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.820] lstrlenW (lpString=".xls") returned 4
	[0051.820] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.820] lstrlenW (lpString=".xlsx") returned 5
	[0051.820] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.820] lstrlenW (lpString=".ppt") returned 4
	[0051.820] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74
	[0051.821] lstrlenW (lpString=".zip") returned 4
	[0051.821] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.821] lstrlenW (lpString=".rar") returned 4
	[0051.821] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.821] lstrlenW (lpString=".bz2") returned 4
	[0051.821] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.821] lstrlenW (lpString=".7z") returned 3
	[0051.821] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74
	[0051.821] lstrlenW (lpString=".dbf") returned 4
	[0051.821] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74
	[0051.821] lstrlenW (lpString=".1cd") returned 4
	[0051.821] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74
	[0051.821] lstrlenW (lpString=".jpg") returned 4
	[0051.821] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74
	[0051.821] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74
	[0051.821] lstrlenW (lpString=".doc") returned 4
	[0051.821] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0051.821] lstrlenW (lpString=".docx") returned 5
	[0051.821] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0051.821] lstrlenW (lpString=".pdf") returned 4
	[0051.821] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0051.821] lstrlenW (lpString=".xls") returned 4
	[0051.821] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0051.821] lstrlenW (lpString=".xlsx") returned 5
	[0051.821] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0051.821] lstrlenW (lpString=".ppt") returned 4
	[0051.821] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0051.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74
	[0051.822] lstrlenW (lpString=".zip") returned 4
	[0051.822] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0051.822] lstrlenW (lpString=".rar") returned 4
	[0051.822] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0051.822] lstrlenW (lpString=".bz2") returned 4
	[0051.822] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0051.822] lstrlenW (lpString=".7z") returned 3
	[0051.822] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0051.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74
	[0051.822] lstrlenW (lpString=".dbf") returned 4
	[0051.822] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0051.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74
	[0051.822] lstrlenW (lpString=".1cd") returned 4
	[0051.822] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0051.822] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF") returned 74
	[0051.822] lstrlenW (lpString=".jpg") returned 4
	[0051.822] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0051.822] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0051.822] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0051.822] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0051.823] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=21812) returned 1
	[0051.823] CloseHandle (hObject=0x1b8) returned 1
	[0051.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png")) returned 0x20
	[0051.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.823] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0051.823] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.823] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.823] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0051.823] GetLastError () returned 0x0
	[0051.823] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x5534, lpOverlapped=0x0) returned 1
	[0051.833] WriteFile (in: hFile=0x224, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x5540, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x5540, lpOverlapped=0x0) returned 1
	[0051.834] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.834] WriteFile (in: hFile=0x224, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0051.834] SetEndOfFile (hFile=0x224) returned 1
	[0051.834] CloseHandle (hObject=0x224) returned 1
	[0051.834] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.834] SetEndOfFile (hFile=0x1b8) returned 1
	[0051.835] CloseHandle (hObject=0x1b8) returned 1
	[0051.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0051.835] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png")) returned 1
	[0051.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75
	[0051.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75
	[0051.836] lstrlenW (lpString=".doc") returned 4
	[0051.836] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.836] lstrlenW (lpString=".docx") returned 5
	[0051.836] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.836] lstrlenW (lpString=".pdf") returned 4
	[0051.836] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.836] lstrlenW (lpString=".xls") returned 4
	[0051.836] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.836] lstrlenW (lpString=".xlsx") returned 5
	[0051.836] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.836] lstrlenW (lpString=".ppt") returned 4
	[0051.836] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75
	[0051.836] lstrlenW (lpString=".zip") returned 4
	[0051.836] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.836] lstrlenW (lpString=".rar") returned 4
	[0051.836] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.836] lstrlenW (lpString=".bz2") returned 4
	[0051.836] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.836] lstrlenW (lpString=".7z") returned 3
	[0051.836] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75
	[0051.836] lstrlenW (lpString=".dbf") returned 4
	[0051.836] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75
	[0051.836] lstrlenW (lpString=".1cd") returned 4
	[0051.836] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75
	[0051.837] lstrlenW (lpString=".jpg") returned 4
	[0051.837] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75
	[0051.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75
	[0051.837] lstrlenW (lpString=".doc") returned 4
	[0051.837] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0051.837] lstrlenW (lpString=".docx") returned 5
	[0051.837] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0051.837] lstrlenW (lpString=".pdf") returned 4
	[0051.837] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0051.837] lstrlenW (lpString=".xls") returned 4
	[0051.837] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0051.837] lstrlenW (lpString=".xlsx") returned 5
	[0051.837] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0051.837] lstrlenW (lpString=".ppt") returned 4
	[0051.837] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0051.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75
	[0051.837] lstrlenW (lpString=".zip") returned 4
	[0051.837] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0051.837] lstrlenW (lpString=".rar") returned 4
	[0051.837] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0051.837] lstrlenW (lpString=".bz2") returned 4
	[0051.837] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0051.837] lstrlenW (lpString=".7z") returned 3
	[0051.837] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0051.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75
	[0051.837] lstrlenW (lpString=".dbf") returned 4
	[0051.837] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0051.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75
	[0051.837] lstrlenW (lpString=".1cd") returned 4
	[0051.837] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0051.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG") returned 75
	[0051.837] lstrlenW (lpString=".jpg") returned 4
	[0051.838] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0051.838] lstrcmpiW (lpString1=".PNG", lpString2=".beets") returned 1
	[0051.838] lstrlenW (lpString="THMBNAIL.PNG") returned 12
	[0051.838] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0052.070] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=19525) returned 1
	[0052.070] CloseHandle (hObject=0x1ac) returned 1
	[0052.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png")) returned 0x20
	[0052.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.070] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0052.071] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.071] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.071] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0052.071] GetLastError () returned 0x0
	[0052.071] ReadFile (in: hFile=0x1ac, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x4c45, lpOverlapped=0x0) returned 1
	[0052.532] WriteFile (in: hFile=0x194, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x4c50, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x4c50, lpOverlapped=0x0) returned 1
	[0052.534] ReadFile (in: hFile=0x1ac, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.534] WriteFile (in: hFile=0x194, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0052.534] SetEndOfFile (hFile=0x194) returned 1
	[0052.534] CloseHandle (hObject=0x194) returned 1
	[0052.534] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.534] SetEndOfFile (hFile=0x1ac) returned 1
	[0052.535] CloseHandle (hObject=0x1ac) returned 1
	[0052.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.535] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png")) returned 1
	[0052.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75
	[0052.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75
	[0052.535] lstrlenW (lpString=".doc") returned 4
	[0052.535] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.535] lstrlenW (lpString=".docx") returned 5
	[0052.536] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.536] lstrlenW (lpString=".pdf") returned 4
	[0052.536] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.536] lstrlenW (lpString=".xls") returned 4
	[0052.536] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.536] lstrlenW (lpString=".xlsx") returned 5
	[0052.536] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.536] lstrlenW (lpString=".ppt") returned 4
	[0052.536] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75
	[0052.536] lstrlenW (lpString=".zip") returned 4
	[0052.536] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.536] lstrlenW (lpString=".rar") returned 4
	[0052.536] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.536] lstrlenW (lpString=".bz2") returned 4
	[0052.536] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.536] lstrlenW (lpString=".7z") returned 3
	[0052.536] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75
	[0052.536] lstrlenW (lpString=".dbf") returned 4
	[0052.536] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75
	[0052.536] lstrlenW (lpString=".1cd") returned 4
	[0052.536] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75
	[0052.536] lstrlenW (lpString=".jpg") returned 4
	[0052.536] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75
	[0052.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75
	[0052.536] lstrlenW (lpString=".doc") returned 4
	[0052.536] lstrcmpiW (lpString1=".doc", lpString2=".PNG") returned -1
	[0052.536] lstrlenW (lpString=".docx") returned 5
	[0052.536] lstrcmpiW (lpString1=".docx", lpString2="L.PNG") returned -1
	[0052.537] lstrlenW (lpString=".pdf") returned 4
	[0052.537] lstrcmpiW (lpString1=".pdf", lpString2=".PNG") returned -1
	[0052.537] lstrlenW (lpString=".xls") returned 4
	[0052.537] lstrcmpiW (lpString1=".xls", lpString2=".PNG") returned 1
	[0052.537] lstrlenW (lpString=".xlsx") returned 5
	[0052.537] lstrcmpiW (lpString1=".xlsx", lpString2="L.PNG") returned -1
	[0052.537] lstrlenW (lpString=".ppt") returned 4
	[0052.537] lstrcmpiW (lpString1=".ppt", lpString2=".PNG") returned 1
	[0052.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75
	[0052.537] lstrlenW (lpString=".zip") returned 4
	[0052.537] lstrcmpiW (lpString1=".zip", lpString2=".PNG") returned 1
	[0052.537] lstrlenW (lpString=".rar") returned 4
	[0052.537] lstrcmpiW (lpString1=".rar", lpString2=".PNG") returned 1
	[0052.537] lstrlenW (lpString=".bz2") returned 4
	[0052.537] lstrcmpiW (lpString1=".bz2", lpString2=".PNG") returned -1
	[0052.537] lstrlenW (lpString=".7z") returned 3
	[0052.537] lstrcmpiW (lpString1=".7z", lpString2="PNG") returned -1
	[0052.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75
	[0052.537] lstrlenW (lpString=".dbf") returned 4
	[0052.537] lstrcmpiW (lpString1=".dbf", lpString2=".PNG") returned -1
	[0052.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75
	[0052.537] lstrlenW (lpString=".1cd") returned 4
	[0052.537] lstrcmpiW (lpString1=".1cd", lpString2=".PNG") returned -1
	[0052.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG") returned 75
	[0052.537] lstrlenW (lpString=".jpg") returned 4
	[0052.537] lstrcmpiW (lpString1=".jpg", lpString2=".PNG") returned -1
	[0052.537] lstrcmpiW (lpString1=".GIF", lpString2=".beets") returned 1
	[0052.537] lstrlenW (lpString="PREVIEW.GIF") returned 11
	[0052.537] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0052.547] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2668) returned 1
	[0052.547] CloseHandle (hObject=0x1ac) returned 1
	[0052.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif")) returned 0x20
	[0052.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.548] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0052.548] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.548] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.548] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0052.846] GetLastError () returned 0x0
	[0052.846] ReadFile (in: hFile=0x1ac, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0xa6c, lpOverlapped=0x0) returned 1
	[0052.850] WriteFile (in: hFile=0x194, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xa70, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xa70, lpOverlapped=0x0) returned 1
	[0052.855] ReadFile (in: hFile=0x1ac, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.855] WriteFile (in: hFile=0x194, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0052.855] SetEndOfFile (hFile=0x194) returned 1
	[0052.855] CloseHandle (hObject=0x194) returned 1
	[0052.855] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.855] SetEndOfFile (hFile=0x1ac) returned 1
	[0052.856] CloseHandle (hObject=0x1ac) returned 1
	[0052.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.856] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif")) returned 1
	[0052.856] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73
	[0052.856] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73
	[0052.856] lstrlenW (lpString=".doc") returned 4
	[0052.856] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0052.857] lstrlenW (lpString=".docx") returned 5
	[0052.857] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0052.857] lstrlenW (lpString=".pdf") returned 4
	[0052.857] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0052.857] lstrlenW (lpString=".xls") returned 4
	[0052.857] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0052.857] lstrlenW (lpString=".xlsx") returned 5
	[0052.857] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0052.857] lstrlenW (lpString=".ppt") returned 4
	[0052.857] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0052.857] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73
	[0052.857] lstrlenW (lpString=".zip") returned 4
	[0052.857] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0052.857] lstrlenW (lpString=".rar") returned 4
	[0052.857] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0052.857] lstrlenW (lpString=".bz2") returned 4
	[0052.857] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0052.857] lstrlenW (lpString=".7z") returned 3
	[0052.857] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0052.857] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73
	[0052.857] lstrlenW (lpString=".dbf") returned 4
	[0052.857] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0052.857] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73
	[0052.857] lstrlenW (lpString=".1cd") returned 4
	[0052.857] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0052.857] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73
	[0052.857] lstrlenW (lpString=".jpg") returned 4
	[0052.857] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0052.857] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73
	[0052.857] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73
	[0052.857] lstrlenW (lpString=".doc") returned 4
	[0052.857] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0052.858] lstrlenW (lpString=".docx") returned 5
	[0052.858] lstrcmpiW (lpString1=".docx", lpString2="W.GIF") returned -1
	[0052.858] lstrlenW (lpString=".pdf") returned 4
	[0052.858] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0052.858] lstrlenW (lpString=".xls") returned 4
	[0052.858] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0052.858] lstrlenW (lpString=".xlsx") returned 5
	[0052.858] lstrcmpiW (lpString1=".xlsx", lpString2="W.GIF") returned -1
	[0052.858] lstrlenW (lpString=".ppt") returned 4
	[0052.858] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0052.858] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73
	[0052.858] lstrlenW (lpString=".zip") returned 4
	[0052.858] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0052.858] lstrlenW (lpString=".rar") returned 4
	[0052.858] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0052.858] lstrlenW (lpString=".bz2") returned 4
	[0052.858] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0052.858] lstrlenW (lpString=".7z") returned 3
	[0052.858] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0052.858] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73
	[0052.858] lstrlenW (lpString=".dbf") returned 4
	[0052.858] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0052.858] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73
	[0052.858] lstrlenW (lpString=".1cd") returned 4
	[0052.858] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0052.858] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF") returned 73
	[0052.858] lstrlenW (lpString=".jpg") returned 4
	[0052.858] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0052.863] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.863] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.863] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0052.863] GetLastError () returned 0x0
	[0052.863] ReadFile (in: hFile=0x1ac, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x2cc, lpOverlapped=0x0) returned 1
	[0052.865] WriteFile (in: hFile=0x194, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x2d0, lpOverlapped=0x0) returned 1
	[0052.866] ReadFile (in: hFile=0x1ac, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.866] WriteFile (in: hFile=0x194, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xfc, lpOverlapped=0x0) returned 1
	[0052.866] SetEndOfFile (hFile=0x194) returned 1
	[0052.866] CloseHandle (hObject=0x194) returned 1
	[0052.866] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.866] SetEndOfFile (hFile=0x1ac) returned 1
	[0052.867] CloseHandle (hObject=0x1ac) returned 1
	[0052.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.867] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config")) returned 1
	[0052.868] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config") returned 77
	[0052.868] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config") returned 77
	[0052.868] lstrlenW (lpString=".doc") returned 4
	[0052.868] lstrcmpiW (lpString1=".doc", lpString2="nfig") returned -1
	[0052.868] lstrlenW (lpString=".docx") returned 5
	[0052.868] lstrcmpiW (lpString1=".docx", lpString2="onfig") returned -1
	[0052.868] lstrlenW (lpString=".pdf") returned 4
	[0052.868] lstrcmpiW (lpString1=".pdf", lpString2="nfig") returned -1
	[0052.868] lstrlenW (lpString=".xls") returned 4
	[0052.868] lstrcmpiW (lpString1=".xls", lpString2="nfig") returned -1
	[0052.868] lstrlenW (lpString=".xlsx") returned 5
	[0052.868] lstrcmpiW (lpString1=".xlsx", lpString2="onfig") returned -1
	[0052.868] lstrlenW (lpString=".ppt") returned 4
	[0052.868] lstrcmpiW (lpString1=".ppt", lpString2="nfig") returned -1
	[0052.868] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config") returned 77
	[0052.868] lstrlenW (lpString=".zip") returned 4
	[0052.868] lstrcmpiW (lpString1=".zip", lpString2="nfig") returned -1
	[0052.868] lstrlenW (lpString=".rar") returned 4
	[0052.868] lstrcmpiW (lpString1=".rar", lpString2="nfig") returned -1
	[0052.868] lstrlenW (lpString=".bz2") returned 4
	[0052.868] lstrcmpiW (lpString1=".bz2", lpString2="nfig") returned -1
	[0052.868] lstrlenW (lpString=".7z") returned 3
	[0052.868] lstrcmpiW (lpString1=".7z", lpString2="fig") returned -1
	[0052.868] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config") returned 77
	[0052.868] lstrlenW (lpString=".dbf") returned 4
	[0052.868] lstrcmpiW (lpString1=".dbf", lpString2="nfig") returned -1
	[0052.868] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config") returned 77
	[0052.868] lstrlenW (lpString=".1cd") returned 4
	[0052.868] lstrcmpiW (lpString1=".1cd", lpString2="nfig") returned -1
	[0052.868] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config") returned 77
	[0052.868] lstrlenW (lpString=".jpg") returned 4
	[0052.869] lstrcmpiW (lpString1=".jpg", lpString2="nfig") returned -1
	[0052.869] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.869] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.869] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0052.870] GetLastError () returned 0x0
	[0052.870] ReadFile (in: hFile=0x1ac, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x296a5, lpOverlapped=0x0) returned 1
	[0052.926] WriteFile (in: hFile=0x194, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x296b0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x296b0, lpOverlapped=0x0) returned 1
	[0052.930] ReadFile (in: hFile=0x1ac, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.930] WriteFile (in: hFile=0x194, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0052.930] SetEndOfFile (hFile=0x194) returned 1
	[0052.930] CloseHandle (hObject=0x194) returned 1
	[0052.930] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.931] SetEndOfFile (hFile=0x1ac) returned 1
	[0052.932] CloseHandle (hObject=0x1ac) returned 1
	[0052.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0052.933] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg")) returned 1
	[0052.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90
	[0052.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90
	[0052.933] lstrlenW (lpString=".doc") returned 4
	[0052.933] lstrcmpiW (lpString1=".doc", lpString2=".MSG") returned -1
	[0052.933] lstrlenW (lpString=".docx") returned 5
	[0052.933] lstrcmpiW (lpString1=".docx", lpString2="T.MSG") returned -1
	[0052.933] lstrlenW (lpString=".pdf") returned 4
	[0052.933] lstrcmpiW (lpString1=".pdf", lpString2=".MSG") returned 1
	[0052.933] lstrlenW (lpString=".xls") returned 4
	[0052.933] lstrcmpiW (lpString1=".xls", lpString2=".MSG") returned 1
	[0052.933] lstrlenW (lpString=".xlsx") returned 5
	[0052.933] lstrcmpiW (lpString1=".xlsx", lpString2="T.MSG") returned -1
	[0052.933] lstrlenW (lpString=".ppt") returned 4
	[0052.933] lstrcmpiW (lpString1=".ppt", lpString2=".MSG") returned 1
	[0052.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90
	[0052.933] lstrlenW (lpString=".zip") returned 4
	[0052.933] lstrcmpiW (lpString1=".zip", lpString2=".MSG") returned 1
	[0052.934] lstrlenW (lpString=".rar") returned 4
	[0052.934] lstrcmpiW (lpString1=".rar", lpString2=".MSG") returned 1
	[0052.934] lstrlenW (lpString=".bz2") returned 4
	[0052.934] lstrcmpiW (lpString1=".bz2", lpString2=".MSG") returned -1
	[0052.934] lstrlenW (lpString=".7z") returned 3
	[0052.934] lstrcmpiW (lpString1=".7z", lpString2="MSG") returned -1
	[0052.934] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90
	[0052.934] lstrlenW (lpString=".dbf") returned 4
	[0052.934] lstrcmpiW (lpString1=".dbf", lpString2=".MSG") returned -1
	[0052.934] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90
	[0052.934] lstrlenW (lpString=".1cd") returned 4
	[0052.934] lstrcmpiW (lpString1=".1cd", lpString2=".MSG") returned -1
	[0052.934] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG") returned 90
	[0052.934] lstrlenW (lpString=".jpg") returned 4
	[0052.934] lstrcmpiW (lpString1=".jpg", lpString2=".MSG") returned -1
	[0053.516] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=2702) returned 1
	[0053.516] CloseHandle (hObject=0x1f0) returned 1
	[0053.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20
	[0053.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0053.516] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0053.516] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0053.516] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0053.516] lstrlenW (lpString=".doc") returned 4
	[0053.516] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0053.516] lstrlenW (lpString=".docx") returned 5
	[0053.516] lstrcmpiW (lpString1=".docx", lpString2="n.bmp") returned -1
	[0053.517] lstrlenW (lpString=".pdf") returned 4
	[0053.517] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0053.517] lstrlenW (lpString=".xls") returned 4
	[0053.517] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0053.517] lstrlenW (lpString=".xlsx") returned 5
	[0053.517] lstrcmpiW (lpString1=".xlsx", lpString2="n.bmp") returned -1
	[0053.517] lstrlenW (lpString=".ppt") returned 4
	[0053.517] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0053.517] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0053.517] lstrlenW (lpString=".zip") returned 4
	[0053.517] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0053.517] lstrlenW (lpString=".rar") returned 4
	[0053.517] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0053.517] lstrlenW (lpString=".bz2") returned 4
	[0053.517] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0053.517] lstrlenW (lpString=".7z") returned 3
	[0053.517] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0053.517] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0053.517] lstrlenW (lpString=".dbf") returned 4
	[0053.517] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0053.517] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0053.517] lstrlenW (lpString=".1cd") returned 4
	[0053.517] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0053.517] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0053.517] lstrlenW (lpString=".jpg") returned 4
	[0053.517] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0057.402] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.402] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0057.402] GetLastError () returned 0x0
	[0057.402] ReadFile (in: hFile=0x1ac, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x712e, lpOverlapped=0x0) returned 1
	[0057.442] WriteFile (in: hFile=0x194, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x7130, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x7130, lpOverlapped=0x0) returned 1
	[0057.444] ReadFile (in: hFile=0x1ac, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.444] WriteFile (in: hFile=0x194, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0057.444] SetEndOfFile (hFile=0x194) returned 1
	[0057.444] CloseHandle (hObject=0x194) returned 1
	[0057.444] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.444] SetEndOfFile (hFile=0x1ac) returned 1
	[0057.445] CloseHandle (hObject=0x1ac) returned 1
	[0057.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.445] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 1
	[0057.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned 77
	[0057.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned 77
	[0057.446] lstrlenW (lpString=".doc") returned 4
	[0057.446] lstrcmpiW (lpString1=".doc", lpString2=".xsl") returned -1
	[0057.446] lstrlenW (lpString=".docx") returned 5
	[0057.446] lstrcmpiW (lpString1=".docx", lpString2="t.xsl") returned -1
	[0057.446] lstrlenW (lpString=".pdf") returned 4
	[0057.446] lstrcmpiW (lpString1=".pdf", lpString2=".xsl") returned -1
	[0057.446] lstrlenW (lpString=".xls") returned 4
	[0057.446] lstrcmpiW (lpString1=".xls", lpString2=".xsl") returned -1
	[0057.446] lstrlenW (lpString=".xlsx") returned 5
	[0057.446] lstrcmpiW (lpString1=".xlsx", lpString2="t.xsl") returned -1
	[0057.446] lstrlenW (lpString=".ppt") returned 4
	[0057.446] lstrcmpiW (lpString1=".ppt", lpString2=".xsl") returned -1
	[0057.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned 77
	[0057.446] lstrlenW (lpString=".zip") returned 4
	[0057.446] lstrcmpiW (lpString1=".zip", lpString2=".xsl") returned 1
	[0057.446] lstrlenW (lpString=".rar") returned 4
	[0057.446] lstrcmpiW (lpString1=".rar", lpString2=".xsl") returned -1
	[0057.446] lstrlenW (lpString=".bz2") returned 4
	[0057.446] lstrcmpiW (lpString1=".bz2", lpString2=".xsl") returned -1
	[0057.446] lstrlenW (lpString=".7z") returned 3
	[0057.446] lstrcmpiW (lpString1=".7z", lpString2="xsl") returned -1
	[0057.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned 77
	[0057.446] lstrlenW (lpString=".dbf") returned 4
	[0057.446] lstrcmpiW (lpString1=".dbf", lpString2=".xsl") returned -1
	[0057.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned 77
	[0057.446] lstrlenW (lpString=".1cd") returned 4
	[0057.446] lstrcmpiW (lpString1=".1cd", lpString2=".xsl") returned -1
	[0057.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned 77
	[0057.447] lstrlenW (lpString=".jpg") returned 4
	[0057.447] lstrcmpiW (lpString1=".jpg", lpString2=".xsl") returned -1
	[0057.644] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=6684) returned 1
	[0057.644] CloseHandle (hObject=0x22c) returned 1
	[0057.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif")) returned 0x20
	[0057.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0057.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0057.645] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.645] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0057.645] GetLastError () returned 0x0
	[0057.645] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x1a1c, lpOverlapped=0x0) returned 1
	[0057.659] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x1a20, lpOverlapped=0x0) returned 1
	[0057.662] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.662] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.662] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.662] CloseHandle (hObject=0x1b0) returned 1
	[0057.663] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.663] SetEndOfFile (hFile=0x22c) returned 1
	[0057.663] CloseHandle (hObject=0x22c) returned 1
	[0057.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.664] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif")) returned 1
	[0057.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 63
	[0057.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 63
	[0057.664] lstrlenW (lpString=".doc") returned 4
	[0057.664] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.664] lstrlenW (lpString=".docx") returned 5
	[0057.664] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.664] lstrlenW (lpString=".pdf") returned 4
	[0057.664] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.664] lstrlenW (lpString=".xls") returned 4
	[0057.664] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.664] lstrlenW (lpString=".xlsx") returned 5
	[0057.664] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.664] lstrlenW (lpString=".ppt") returned 4
	[0057.664] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 63
	[0057.664] lstrlenW (lpString=".zip") returned 4
	[0057.664] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.664] lstrlenW (lpString=".rar") returned 4
	[0057.664] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.664] lstrlenW (lpString=".bz2") returned 4
	[0057.664] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.664] lstrlenW (lpString=".7z") returned 3
	[0057.664] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 63
	[0057.665] lstrlenW (lpString=".dbf") returned 4
	[0057.665] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 63
	[0057.665] lstrlenW (lpString=".1cd") returned 4
	[0057.665] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 63
	[0057.665] lstrlenW (lpString=".jpg") returned 4
	[0057.665] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0057.666] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.666] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0057.666] GetLastError () returned 0x0
	[0057.666] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0xcb3, lpOverlapped=0x0) returned 1
	[0057.668] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xcc0, lpOverlapped=0x0) returned 1
	[0057.668] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.668] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.669] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.669] CloseHandle (hObject=0x1b0) returned 1
	[0057.669] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.669] SetEndOfFile (hFile=0x22c) returned 1
	[0057.670] CloseHandle (hObject=0x22c) returned 1
	[0057.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.670] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif")) returned 1
	[0057.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 63
	[0057.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 63
	[0057.670] lstrlenW (lpString=".doc") returned 4
	[0057.670] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.670] lstrlenW (lpString=".docx") returned 5
	[0057.670] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.670] lstrlenW (lpString=".pdf") returned 4
	[0057.670] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.670] lstrlenW (lpString=".xls") returned 4
	[0057.670] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.670] lstrlenW (lpString=".xlsx") returned 5
	[0057.670] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.670] lstrlenW (lpString=".ppt") returned 4
	[0057.670] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 63
	[0057.670] lstrlenW (lpString=".zip") returned 4
	[0057.671] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.671] lstrlenW (lpString=".rar") returned 4
	[0057.671] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.671] lstrlenW (lpString=".bz2") returned 4
	[0057.671] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.671] lstrlenW (lpString=".7z") returned 3
	[0057.671] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 63
	[0057.671] lstrlenW (lpString=".dbf") returned 4
	[0057.671] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 63
	[0057.671] lstrlenW (lpString=".1cd") returned 4
	[0057.671] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 63
	[0057.671] lstrlenW (lpString=".jpg") returned 4
	[0057.671] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0057.671] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.671] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0057.672] GetLastError () returned 0x0
	[0057.672] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x1fa1, lpOverlapped=0x0) returned 1
	[0057.673] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x1fb0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x1fb0, lpOverlapped=0x0) returned 1
	[0057.674] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.674] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.674] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.674] CloseHandle (hObject=0x1b0) returned 1
	[0057.674] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.674] SetEndOfFile (hFile=0x22c) returned 1
	[0057.675] CloseHandle (hObject=0x22c) returned 1
	[0057.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.676] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif")) returned 1
	[0057.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 63
	[0057.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 63
	[0057.676] lstrlenW (lpString=".doc") returned 4
	[0057.676] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.676] lstrlenW (lpString=".docx") returned 5
	[0057.676] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.676] lstrlenW (lpString=".pdf") returned 4
	[0057.676] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.676] lstrlenW (lpString=".xls") returned 4
	[0057.676] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.676] lstrlenW (lpString=".xlsx") returned 5
	[0057.676] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.676] lstrlenW (lpString=".ppt") returned 4
	[0057.676] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 63
	[0057.676] lstrlenW (lpString=".zip") returned 4
	[0057.676] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.676] lstrlenW (lpString=".rar") returned 4
	[0057.676] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.676] lstrlenW (lpString=".bz2") returned 4
	[0057.676] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.676] lstrlenW (lpString=".7z") returned 3
	[0057.676] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 63
	[0057.676] lstrlenW (lpString=".dbf") returned 4
	[0057.676] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 63
	[0057.677] lstrlenW (lpString=".1cd") returned 4
	[0057.677] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 63
	[0057.677] lstrlenW (lpString=".jpg") returned 4
	[0057.677] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0057.677] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x7c5ff1c | out: lpFileSize=0x7c5ff1c*=7686) returned 1
	[0057.677] CloseHandle (hObject=0x22c) returned 1
	[0057.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif")) returned 0x20
	[0057.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0057.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0057.677] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.677] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0057.678] GetLastError () returned 0x0
	[0057.678] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x1e06, lpOverlapped=0x0) returned 1
	[0057.679] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x1e10, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x1e10, lpOverlapped=0x0) returned 1
	[0057.680] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.680] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.681] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.681] CloseHandle (hObject=0x1b0) returned 1
	[0057.681] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.681] SetEndOfFile (hFile=0x22c) returned 1
	[0057.682] CloseHandle (hObject=0x22c) returned 1
	[0057.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.682] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif")) returned 1
	[0057.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 63
	[0057.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 63
	[0057.682] lstrlenW (lpString=".doc") returned 4
	[0057.682] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.682] lstrlenW (lpString=".docx") returned 5
	[0057.682] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.682] lstrlenW (lpString=".pdf") returned 4
	[0057.682] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.682] lstrlenW (lpString=".xls") returned 4
	[0057.683] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.683] lstrlenW (lpString=".xlsx") returned 5
	[0057.683] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.683] lstrlenW (lpString=".ppt") returned 4
	[0057.683] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 63
	[0057.683] lstrlenW (lpString=".zip") returned 4
	[0057.683] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.683] lstrlenW (lpString=".rar") returned 4
	[0057.683] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.683] lstrlenW (lpString=".bz2") returned 4
	[0057.683] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.683] lstrlenW (lpString=".7z") returned 3
	[0057.683] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 63
	[0057.683] lstrlenW (lpString=".dbf") returned 4
	[0057.683] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 63
	[0057.683] lstrlenW (lpString=".1cd") returned 4
	[0057.683] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 63
	[0057.683] lstrlenW (lpString=".jpg") returned 4
	[0057.683] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0057.683] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.684] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0057.684] GetLastError () returned 0x0
	[0057.684] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x2e73, lpOverlapped=0x0) returned 1
	[0057.686] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x2e80, lpOverlapped=0x0) returned 1
	[0057.689] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.689] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.689] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.689] CloseHandle (hObject=0x1b0) returned 1
	[0057.689] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.689] SetEndOfFile (hFile=0x22c) returned 1
	[0057.690] CloseHandle (hObject=0x22c) returned 1
	[0057.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.691] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif")) returned 1
	[0057.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 63
	[0057.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 63
	[0057.691] lstrlenW (lpString=".doc") returned 4
	[0057.691] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.691] lstrlenW (lpString=".docx") returned 5
	[0057.691] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.691] lstrlenW (lpString=".pdf") returned 4
	[0057.691] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.691] lstrlenW (lpString=".xls") returned 4
	[0057.691] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.691] lstrlenW (lpString=".xlsx") returned 5
	[0057.691] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.691] lstrlenW (lpString=".ppt") returned 4
	[0057.691] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 63
	[0057.691] lstrlenW (lpString=".zip") returned 4
	[0057.691] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.691] lstrlenW (lpString=".rar") returned 4
	[0057.691] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.691] lstrlenW (lpString=".bz2") returned 4
	[0057.691] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.691] lstrlenW (lpString=".7z") returned 3
	[0057.691] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 63
	[0057.691] lstrlenW (lpString=".dbf") returned 4
	[0057.691] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 63
	[0057.692] lstrlenW (lpString=".1cd") returned 4
	[0057.692] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 63
	[0057.692] lstrlenW (lpString=".jpg") returned 4
	[0057.692] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0057.694] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.694] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0057.694] GetLastError () returned 0x0
	[0057.694] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x205, lpOverlapped=0x0) returned 1
	[0057.695] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x210, lpOverlapped=0x0) returned 1
	[0057.696] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.697] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.697] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.697] CloseHandle (hObject=0x1b0) returned 1
	[0057.697] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.697] SetEndOfFile (hFile=0x22c) returned 1
	[0057.698] CloseHandle (hObject=0x22c) returned 1
	[0057.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.698] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif")) returned 1
	[0057.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 63
	[0057.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 63
	[0057.698] lstrlenW (lpString=".doc") returned 4
	[0057.698] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.698] lstrlenW (lpString=".docx") returned 5
	[0057.698] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.698] lstrlenW (lpString=".pdf") returned 4
	[0057.698] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.698] lstrlenW (lpString=".xls") returned 4
	[0057.698] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.698] lstrlenW (lpString=".xlsx") returned 5
	[0057.699] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.699] lstrlenW (lpString=".ppt") returned 4
	[0057.699] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 63
	[0057.699] lstrlenW (lpString=".zip") returned 4
	[0057.699] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.699] lstrlenW (lpString=".rar") returned 4
	[0057.699] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.699] lstrlenW (lpString=".bz2") returned 4
	[0057.699] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.699] lstrlenW (lpString=".7z") returned 3
	[0057.699] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 63
	[0057.699] lstrlenW (lpString=".dbf") returned 4
	[0057.699] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 63
	[0057.699] lstrlenW (lpString=".1cd") returned 4
	[0057.699] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 63
	[0057.699] lstrlenW (lpString=".jpg") returned 4
	[0057.699] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0057.699] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.699] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0057.700] GetLastError () returned 0x0
	[0057.700] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x1f6, lpOverlapped=0x0) returned 1
	[0057.701] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x200, lpOverlapped=0x0) returned 1
	[0057.702] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.702] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.702] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.702] CloseHandle (hObject=0x1b0) returned 1
	[0057.702] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.702] SetEndOfFile (hFile=0x22c) returned 1
	[0057.703] CloseHandle (hObject=0x22c) returned 1
	[0057.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.703] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif")) returned 1
	[0057.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 63
	[0057.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 63
	[0057.703] lstrlenW (lpString=".doc") returned 4
	[0057.703] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.703] lstrlenW (lpString=".docx") returned 5
	[0057.703] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.703] lstrlenW (lpString=".pdf") returned 4
	[0057.703] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.703] lstrlenW (lpString=".xls") returned 4
	[0057.704] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.704] lstrlenW (lpString=".xlsx") returned 5
	[0057.704] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.704] lstrlenW (lpString=".ppt") returned 4
	[0057.704] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 63
	[0057.704] lstrlenW (lpString=".zip") returned 4
	[0057.704] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.704] lstrlenW (lpString=".rar") returned 4
	[0057.704] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.704] lstrlenW (lpString=".bz2") returned 4
	[0057.704] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.704] lstrlenW (lpString=".7z") returned 3
	[0057.704] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 63
	[0057.704] lstrlenW (lpString=".dbf") returned 4
	[0057.704] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 63
	[0057.704] lstrlenW (lpString=".1cd") returned 4
	[0057.704] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 63
	[0057.704] lstrlenW (lpString=".jpg") returned 4
	[0057.704] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0057.705] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.705] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0057.705] GetLastError () returned 0x0
	[0057.705] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x319e, lpOverlapped=0x0) returned 1
	[0057.710] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x31a0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x31a0, lpOverlapped=0x0) returned 1
	[0057.711] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.711] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.711] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.711] CloseHandle (hObject=0x1b0) returned 1
	[0057.711] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.711] SetEndOfFile (hFile=0x22c) returned 1
	[0057.712] CloseHandle (hObject=0x22c) returned 1
	[0057.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.712] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif")) returned 1
	[0057.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 63
	[0057.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 63
	[0057.713] lstrlenW (lpString=".doc") returned 4
	[0057.713] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.713] lstrlenW (lpString=".docx") returned 5
	[0057.713] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.713] lstrlenW (lpString=".pdf") returned 4
	[0057.713] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.713] lstrlenW (lpString=".xls") returned 4
	[0057.713] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.713] lstrlenW (lpString=".xlsx") returned 5
	[0057.713] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.713] lstrlenW (lpString=".ppt") returned 4
	[0057.713] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 63
	[0057.713] lstrlenW (lpString=".zip") returned 4
	[0057.713] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.713] lstrlenW (lpString=".rar") returned 4
	[0057.713] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.713] lstrlenW (lpString=".bz2") returned 4
	[0057.713] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.713] lstrlenW (lpString=".7z") returned 3
	[0057.713] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 63
	[0057.713] lstrlenW (lpString=".dbf") returned 4
	[0057.713] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 63
	[0057.713] lstrlenW (lpString=".1cd") returned 4
	[0057.714] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 63
	[0057.714] lstrlenW (lpString=".jpg") returned 4
	[0057.714] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0057.714] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.714] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0057.714] GetLastError () returned 0x0
	[0057.714] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0xd9c, lpOverlapped=0x0) returned 1
	[0057.716] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xda0, lpOverlapped=0x0) returned 1
	[0057.717] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.717] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.717] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.717] CloseHandle (hObject=0x1b0) returned 1
	[0057.717] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.717] SetEndOfFile (hFile=0x22c) returned 1
	[0057.718] CloseHandle (hObject=0x22c) returned 1
	[0057.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.718] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif")) returned 1
	[0057.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 63
	[0057.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 63
	[0057.718] lstrlenW (lpString=".doc") returned 4
	[0057.718] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.718] lstrlenW (lpString=".docx") returned 5
	[0057.718] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.719] lstrlenW (lpString=".pdf") returned 4
	[0057.719] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.719] lstrlenW (lpString=".xls") returned 4
	[0057.719] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.719] lstrlenW (lpString=".xlsx") returned 5
	[0057.719] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.719] lstrlenW (lpString=".ppt") returned 4
	[0057.719] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 63
	[0057.719] lstrlenW (lpString=".zip") returned 4
	[0057.719] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.719] lstrlenW (lpString=".rar") returned 4
	[0057.719] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.719] lstrlenW (lpString=".bz2") returned 4
	[0057.719] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.719] lstrlenW (lpString=".7z") returned 3
	[0057.719] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 63
	[0057.719] lstrlenW (lpString=".dbf") returned 4
	[0057.719] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 63
	[0057.719] lstrlenW (lpString=".1cd") returned 4
	[0057.719] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 63
	[0057.719] lstrlenW (lpString=".jpg") returned 4
	[0057.719] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0057.720] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.720] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0057.720] GetLastError () returned 0x0
	[0057.720] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0xc44, lpOverlapped=0x0) returned 1
	[0057.721] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xc50, lpOverlapped=0x0) returned 1
	[0057.722] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.722] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.722] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.722] CloseHandle (hObject=0x1b0) returned 1
	[0057.723] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.723] SetEndOfFile (hFile=0x22c) returned 1
	[0057.723] CloseHandle (hObject=0x22c) returned 1
	[0057.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.724] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif")) returned 1
	[0057.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 63
	[0057.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 63
	[0057.724] lstrlenW (lpString=".doc") returned 4
	[0057.724] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.724] lstrlenW (lpString=".docx") returned 5
	[0057.724] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.724] lstrlenW (lpString=".pdf") returned 4
	[0057.724] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.724] lstrlenW (lpString=".xls") returned 4
	[0057.724] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.724] lstrlenW (lpString=".xlsx") returned 5
	[0057.724] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.724] lstrlenW (lpString=".ppt") returned 4
	[0057.724] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 63
	[0057.724] lstrlenW (lpString=".zip") returned 4
	[0057.724] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.724] lstrlenW (lpString=".rar") returned 4
	[0057.724] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.724] lstrlenW (lpString=".bz2") returned 4
	[0057.724] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.725] lstrlenW (lpString=".7z") returned 3
	[0057.725] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 63
	[0057.725] lstrlenW (lpString=".dbf") returned 4
	[0057.725] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 63
	[0057.725] lstrlenW (lpString=".1cd") returned 4
	[0057.725] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 63
	[0057.725] lstrlenW (lpString=".jpg") returned 4
	[0057.725] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0057.725] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.725] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0057.725] GetLastError () returned 0x0
	[0057.725] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x30c2, lpOverlapped=0x0) returned 1
	[0057.727] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x30d0, lpOverlapped=0x0) returned 1
	[0057.728] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.729] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.729] SetEndOfFile (hFile=0x1b0) returned 1
	[0057.729] CloseHandle (hObject=0x1b0) returned 1
	[0057.729] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.729] SetEndOfFile (hFile=0x22c) returned 1
	[0057.730] CloseHandle (hObject=0x22c) returned 1
	[0057.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.730] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif")) returned 1
	[0057.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 63
	[0057.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 63
	[0057.730] lstrlenW (lpString=".doc") returned 4
	[0057.730] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0057.730] lstrlenW (lpString=".docx") returned 5
	[0057.730] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0057.730] lstrlenW (lpString=".pdf") returned 4
	[0057.730] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0057.730] lstrlenW (lpString=".xls") returned 4
	[0057.730] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0057.730] lstrlenW (lpString=".xlsx") returned 5
	[0057.731] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0057.731] lstrlenW (lpString=".ppt") returned 4
	[0057.731] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0057.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 63
	[0057.731] lstrlenW (lpString=".zip") returned 4
	[0057.731] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0057.731] lstrlenW (lpString=".rar") returned 4
	[0057.731] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0057.731] lstrlenW (lpString=".bz2") returned 4
	[0057.731] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0057.731] lstrlenW (lpString=".7z") returned 3
	[0057.731] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0057.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 63
	[0057.731] lstrlenW (lpString=".dbf") returned 4
	[0057.731] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0057.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 63
	[0057.731] lstrlenW (lpString=".1cd") returned 4
	[0057.731] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0057.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 63
	[0057.731] lstrlenW (lpString=".jpg") returned 4
	[0057.731] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0057.731] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.731] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0057.732] GetLastError () returned 0x0
	[0057.732] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x1485, lpOverlapped=0x0) returned 1
	[0058.084] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x1490, lpOverlapped=0x0) returned 1
	[0058.138] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.145] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.148] SetEndOfFile (hFile=0x1b0) returned 1
	[0058.656] CloseHandle (hObject=0x1b0) returned 1
	[0058.656] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.656] SetEndOfFile (hFile=0x22c) returned 1
	[0058.663] CloseHandle (hObject=0x22c) returned 1
	[0058.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.670] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif")) returned 1
	[0058.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 63
	[0058.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 63
	[0058.671] lstrlenW (lpString=".doc") returned 4
	[0058.677] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.677] lstrlenW (lpString=".docx") returned 5
	[0058.677] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.677] lstrlenW (lpString=".pdf") returned 4
	[0058.684] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.684] lstrlenW (lpString=".xls") returned 4
	[0058.684] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.684] lstrlenW (lpString=".xlsx") returned 5
	[0058.684] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.684] lstrlenW (lpString=".ppt") returned 4
	[0058.684] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 63
	[0058.684] lstrlenW (lpString=".zip") returned 4
	[0058.684] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.684] lstrlenW (lpString=".rar") returned 4
	[0058.684] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.684] lstrlenW (lpString=".bz2") returned 4
	[0058.684] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.684] lstrlenW (lpString=".7z") returned 3
	[0058.684] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 63
	[0058.684] lstrlenW (lpString=".dbf") returned 4
	[0058.684] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 63
	[0058.684] lstrlenW (lpString=".1cd") returned 4
	[0058.684] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 63
	[0058.684] lstrlenW (lpString=".jpg") returned 4
	[0058.684] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.684] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.685] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0058.685] GetLastError () returned 0x0
	[0058.685] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x47a, lpOverlapped=0x0) returned 1
	[0058.693] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x480, lpOverlapped=0x0) returned 1
	[0058.694] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.694] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.694] SetEndOfFile (hFile=0x1b0) returned 1
	[0058.694] CloseHandle (hObject=0x1b0) returned 1
	[0058.694] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.694] SetEndOfFile (hFile=0x22c) returned 1
	[0058.695] CloseHandle (hObject=0x22c) returned 1
	[0058.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.696] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif")) returned 1
	[0058.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 63
	[0058.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 63
	[0058.696] lstrlenW (lpString=".doc") returned 4
	[0058.696] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.696] lstrlenW (lpString=".docx") returned 5
	[0058.696] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.696] lstrlenW (lpString=".pdf") returned 4
	[0058.696] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.696] lstrlenW (lpString=".xls") returned 4
	[0058.696] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.696] lstrlenW (lpString=".xlsx") returned 5
	[0058.696] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.696] lstrlenW (lpString=".ppt") returned 4
	[0058.696] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 63
	[0058.696] lstrlenW (lpString=".zip") returned 4
	[0058.696] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.696] lstrlenW (lpString=".rar") returned 4
	[0058.696] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.696] lstrlenW (lpString=".bz2") returned 4
	[0058.696] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.696] lstrlenW (lpString=".7z") returned 3
	[0058.696] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 63
	[0058.696] lstrlenW (lpString=".dbf") returned 4
	[0058.697] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 63
	[0058.697] lstrlenW (lpString=".1cd") returned 4
	[0058.697] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 63
	[0058.697] lstrlenW (lpString=".jpg") returned 4
	[0058.697] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.703] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.708] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0058.720] GetLastError () returned 0x0
	[0058.720] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x1b48, lpOverlapped=0x0) returned 1
	[0058.739] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x1b50, lpOverlapped=0x0) returned 1
	[0058.740] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.740] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.740] SetEndOfFile (hFile=0x1b0) returned 1
	[0058.740] CloseHandle (hObject=0x1b0) returned 1
	[0058.741] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.741] SetEndOfFile (hFile=0x22c) returned 1
	[0058.742] CloseHandle (hObject=0x22c) returned 1
	[0058.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.742] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif")) returned 1
	[0058.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 63
	[0058.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 63
	[0058.743] lstrlenW (lpString=".doc") returned 4
	[0058.743] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.743] lstrlenW (lpString=".docx") returned 5
	[0058.743] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.743] lstrlenW (lpString=".pdf") returned 4
	[0058.743] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.743] lstrlenW (lpString=".xls") returned 4
	[0058.743] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.743] lstrlenW (lpString=".xlsx") returned 5
	[0058.743] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.743] lstrlenW (lpString=".ppt") returned 4
	[0058.743] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 63
	[0058.743] lstrlenW (lpString=".zip") returned 4
	[0058.743] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.743] lstrlenW (lpString=".rar") returned 4
	[0058.743] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.743] lstrlenW (lpString=".bz2") returned 4
	[0058.743] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.743] lstrlenW (lpString=".7z") returned 3
	[0058.743] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 63
	[0058.743] lstrlenW (lpString=".dbf") returned 4
	[0058.743] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 63
	[0058.743] lstrlenW (lpString=".1cd") returned 4
	[0058.743] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 63
	[0058.744] lstrlenW (lpString=".jpg") returned 4
	[0058.744] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.744] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.744] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0058.745] GetLastError () returned 0x0
	[0058.745] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x1126, lpOverlapped=0x0) returned 1
	[0058.747] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x1130, lpOverlapped=0x0) returned 1
	[0058.748] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.748] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.748] SetEndOfFile (hFile=0x1b0) returned 1
	[0058.748] CloseHandle (hObject=0x1b0) returned 1
	[0058.748] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.748] SetEndOfFile (hFile=0x22c) returned 1
	[0058.749] CloseHandle (hObject=0x22c) returned 1
	[0058.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.749] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif")) returned 1
	[0058.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 63
	[0058.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 63
	[0058.750] lstrlenW (lpString=".doc") returned 4
	[0058.750] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0058.750] lstrlenW (lpString=".docx") returned 5
	[0058.750] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0058.750] lstrlenW (lpString=".pdf") returned 4
	[0058.750] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0058.750] lstrlenW (lpString=".xls") returned 4
	[0058.750] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0058.750] lstrlenW (lpString=".xlsx") returned 5
	[0058.751] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0058.751] lstrlenW (lpString=".ppt") returned 4
	[0058.751] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0058.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 63
	[0058.751] lstrlenW (lpString=".zip") returned 4
	[0058.751] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0058.752] lstrlenW (lpString=".rar") returned 4
	[0058.752] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0058.752] lstrlenW (lpString=".bz2") returned 4
	[0058.752] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0058.752] lstrlenW (lpString=".7z") returned 3
	[0058.752] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0058.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 63
	[0058.752] lstrlenW (lpString=".dbf") returned 4
	[0058.752] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0058.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 63
	[0058.752] lstrlenW (lpString=".1cd") returned 4
	[0058.752] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0058.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 63
	[0058.752] lstrlenW (lpString=".jpg") returned 4
	[0058.752] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0058.752] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.752] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0058.753] GetLastError () returned 0x0
	[0058.753] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0xf7e, lpOverlapped=0x0) returned 1
	[0058.918] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xf80, lpOverlapped=0x0) returned 1
	[0058.920] ReadFile (in: hFile=0x22c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0058.920] WriteFile (in: hFile=0x1b0, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0058.920] SetEndOfFile (hFile=0x1b0) returned 1
	[0058.920] CloseHandle (hObject=0x1b0) returned 1
	[0058.920] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0058.920] SetEndOfFile (hFile=0x22c) returned 1
	[0058.921] CloseHandle (hObject=0x22c) returned 1
	[0058.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0058.921] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif")) returned 1
	[0059.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 63
	[0059.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 63
	[0059.283] lstrlenW (lpString=".doc") returned 4
	[0059.283] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0059.283] lstrlenW (lpString=".docx") returned 5
	[0059.283] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0059.283] lstrlenW (lpString=".pdf") returned 4
	[0059.283] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0059.283] lstrlenW (lpString=".xls") returned 4
	[0059.283] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0059.283] lstrlenW (lpString=".xlsx") returned 5
	[0059.283] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0059.283] lstrlenW (lpString=".ppt") returned 4
	[0059.283] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0059.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 63
	[0059.283] lstrlenW (lpString=".zip") returned 4
	[0059.283] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0059.283] lstrlenW (lpString=".rar") returned 4
	[0059.283] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0059.283] lstrlenW (lpString=".bz2") returned 4
	[0059.283] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0059.283] lstrlenW (lpString=".7z") returned 3
	[0059.283] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0059.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 63
	[0059.283] lstrlenW (lpString=".dbf") returned 4
	[0059.283] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0059.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 63
	[0059.283] lstrlenW (lpString=".1cd") returned 4
	[0059.284] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0059.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 63
	[0059.284] lstrlenW (lpString=".jpg") returned 4
	[0059.284] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0061.307] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.307] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0061.313] GetLastError () returned 0x0
	[0061.313] ReadFile (in: hFile=0x21c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x728, lpOverlapped=0x0) returned 1
	[0061.344] WriteFile (in: hFile=0x240, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x730, lpOverlapped=0x0) returned 1
	[0061.345] ReadFile (in: hFile=0x21c, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.345] WriteFile (in: hFile=0x240, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.345] SetEndOfFile (hFile=0x240) returned 1
	[0061.345] CloseHandle (hObject=0x240) returned 1
	[0061.346] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.346] SetEndOfFile (hFile=0x21c) returned 1
	[0061.346] CloseHandle (hObject=0x21c) returned 1
	[0061.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.347] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf")) returned 1
	[0061.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 63
	[0061.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 63
	[0061.347] lstrlenW (lpString=".doc") returned 4
	[0061.347] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0061.347] lstrlenW (lpString=".docx") returned 5
	[0061.347] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0061.347] lstrlenW (lpString=".pdf") returned 4
	[0061.347] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0061.347] lstrlenW (lpString=".xls") returned 4
	[0061.348] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0061.348] lstrlenW (lpString=".xlsx") returned 5
	[0061.348] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0061.348] lstrlenW (lpString=".ppt") returned 4
	[0061.348] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0061.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 63
	[0061.348] lstrlenW (lpString=".zip") returned 4
	[0061.348] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0061.348] lstrlenW (lpString=".rar") returned 4
	[0061.348] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0061.348] lstrlenW (lpString=".bz2") returned 4
	[0061.348] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0061.348] lstrlenW (lpString=".7z") returned 3
	[0061.348] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0061.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 63
	[0061.348] lstrlenW (lpString=".dbf") returned 4
	[0061.348] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0061.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 63
	[0061.348] lstrlenW (lpString=".1cd") returned 4
	[0061.348] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0061.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 63
	[0061.348] lstrlenW (lpString=".jpg") returned 4
	[0061.348] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.881] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.881] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0062.881] GetLastError () returned 0x0
	[0062.882] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x10c8, lpOverlapped=0x0) returned 1
	[0062.883] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x10d0, lpOverlapped=0x0) returned 1
	[0062.884] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.884] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.884] SetEndOfFile (hFile=0x1d8) returned 1
	[0062.885] CloseHandle (hObject=0x1d8) returned 1
	[0062.885] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.885] SetEndOfFile (hFile=0x1b8) returned 1
	[0062.886] CloseHandle (hObject=0x1b8) returned 1
	[0062.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.886] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf")) returned 1
	[0062.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 63
	[0062.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 63
	[0062.886] lstrlenW (lpString=".doc") returned 4
	[0062.886] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.886] lstrlenW (lpString=".docx") returned 5
	[0062.886] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.886] lstrlenW (lpString=".pdf") returned 4
	[0062.886] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.886] lstrlenW (lpString=".xls") returned 4
	[0062.886] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.886] lstrlenW (lpString=".xlsx") returned 5
	[0062.886] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.886] lstrlenW (lpString=".ppt") returned 4
	[0062.886] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 63
	[0062.887] lstrlenW (lpString=".zip") returned 4
	[0062.887] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.887] lstrlenW (lpString=".rar") returned 4
	[0062.887] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.887] lstrlenW (lpString=".bz2") returned 4
	[0062.887] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.887] lstrlenW (lpString=".7z") returned 3
	[0062.887] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 63
	[0062.887] lstrlenW (lpString=".dbf") returned 4
	[0062.887] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 63
	[0062.887] lstrlenW (lpString=".1cd") returned 4
	[0062.887] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 63
	[0062.887] lstrlenW (lpString=".jpg") returned 4
	[0062.887] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.887] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.887] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0062.888] GetLastError () returned 0x0
	[0062.888] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x687c, lpOverlapped=0x0) returned 1
	[0062.890] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x6880, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x6880, lpOverlapped=0x0) returned 1
	[0062.891] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.891] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.893] SetEndOfFile (hFile=0x1d8) returned 1
	[0062.894] CloseHandle (hObject=0x1d8) returned 1
	[0062.894] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.894] SetEndOfFile (hFile=0x1b8) returned 1
	[0062.895] CloseHandle (hObject=0x1b8) returned 1
	[0062.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.895] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf")) returned 1
	[0062.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 63
	[0062.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 63
	[0062.895] lstrlenW (lpString=".doc") returned 4
	[0062.895] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.895] lstrlenW (lpString=".docx") returned 5
	[0062.895] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.895] lstrlenW (lpString=".pdf") returned 4
	[0062.896] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.896] lstrlenW (lpString=".xls") returned 4
	[0062.896] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.896] lstrlenW (lpString=".xlsx") returned 5
	[0062.896] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.896] lstrlenW (lpString=".ppt") returned 4
	[0062.896] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 63
	[0062.896] lstrlenW (lpString=".zip") returned 4
	[0062.896] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.896] lstrlenW (lpString=".rar") returned 4
	[0062.896] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.896] lstrlenW (lpString=".bz2") returned 4
	[0062.896] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.896] lstrlenW (lpString=".7z") returned 3
	[0062.896] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 63
	[0062.896] lstrlenW (lpString=".dbf") returned 4
	[0062.896] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 63
	[0062.896] lstrlenW (lpString=".1cd") returned 4
	[0062.896] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 63
	[0062.896] lstrlenW (lpString=".jpg") returned 4
	[0062.896] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.896] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.897] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0062.897] GetLastError () returned 0x0
	[0062.897] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x133c, lpOverlapped=0x0) returned 1
	[0062.899] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x1340, lpOverlapped=0x0) returned 1
	[0062.899] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.899] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.900] SetEndOfFile (hFile=0x1d8) returned 1
	[0062.900] CloseHandle (hObject=0x1d8) returned 1
	[0062.900] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.900] SetEndOfFile (hFile=0x1b8) returned 1
	[0062.901] CloseHandle (hObject=0x1b8) returned 1
	[0062.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.901] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf")) returned 1
	[0062.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 63
	[0062.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 63
	[0062.901] lstrlenW (lpString=".doc") returned 4
	[0062.901] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.901] lstrlenW (lpString=".docx") returned 5
	[0062.901] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.901] lstrlenW (lpString=".pdf") returned 4
	[0062.901] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.901] lstrlenW (lpString=".xls") returned 4
	[0062.901] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.901] lstrlenW (lpString=".xlsx") returned 5
	[0062.902] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.902] lstrlenW (lpString=".ppt") returned 4
	[0062.902] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 63
	[0062.902] lstrlenW (lpString=".zip") returned 4
	[0062.902] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.902] lstrlenW (lpString=".rar") returned 4
	[0062.902] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.902] lstrlenW (lpString=".bz2") returned 4
	[0062.902] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.902] lstrlenW (lpString=".7z") returned 3
	[0062.902] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 63
	[0062.902] lstrlenW (lpString=".dbf") returned 4
	[0062.902] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 63
	[0062.902] lstrlenW (lpString=".1cd") returned 4
	[0062.902] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 63
	[0062.902] lstrlenW (lpString=".jpg") returned 4
	[0062.902] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.903] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.903] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0062.903] GetLastError () returned 0x0
	[0062.903] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0xfe2, lpOverlapped=0x0) returned 1
	[0062.905] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xff0, lpOverlapped=0x0) returned 1
	[0062.906] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.906] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.906] SetEndOfFile (hFile=0x1d8) returned 1
	[0062.906] CloseHandle (hObject=0x1d8) returned 1
	[0062.906] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.906] SetEndOfFile (hFile=0x1b8) returned 1
	[0062.907] CloseHandle (hObject=0x1b8) returned 1
	[0062.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.907] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf")) returned 1
	[0062.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 63
	[0062.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 63
	[0062.907] lstrlenW (lpString=".doc") returned 4
	[0062.908] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.908] lstrlenW (lpString=".docx") returned 5
	[0062.908] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.908] lstrlenW (lpString=".pdf") returned 4
	[0062.908] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.908] lstrlenW (lpString=".xls") returned 4
	[0062.908] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.908] lstrlenW (lpString=".xlsx") returned 5
	[0062.908] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.908] lstrlenW (lpString=".ppt") returned 4
	[0062.908] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 63
	[0062.908] lstrlenW (lpString=".zip") returned 4
	[0062.908] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.908] lstrlenW (lpString=".rar") returned 4
	[0062.908] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.908] lstrlenW (lpString=".bz2") returned 4
	[0062.908] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.908] lstrlenW (lpString=".7z") returned 3
	[0062.908] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 63
	[0062.908] lstrlenW (lpString=".dbf") returned 4
	[0062.908] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 63
	[0062.908] lstrlenW (lpString=".1cd") returned 4
	[0062.908] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 63
	[0062.908] lstrlenW (lpString=".jpg") returned 4
	[0062.908] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.909] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.909] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0062.909] GetLastError () returned 0x0
	[0062.909] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x5f00, lpOverlapped=0x0) returned 1
	[0062.911] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x5f10, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x5f10, lpOverlapped=0x0) returned 1
	[0062.912] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.912] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.912] SetEndOfFile (hFile=0x1d8) returned 1
	[0062.913] CloseHandle (hObject=0x1d8) returned 1
	[0062.913] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.913] SetEndOfFile (hFile=0x1b8) returned 1
	[0062.914] CloseHandle (hObject=0x1b8) returned 1
	[0062.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.914] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf")) returned 1
	[0062.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 63
	[0062.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 63
	[0062.914] lstrlenW (lpString=".doc") returned 4
	[0062.914] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.914] lstrlenW (lpString=".docx") returned 5
	[0062.914] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.914] lstrlenW (lpString=".pdf") returned 4
	[0062.914] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.914] lstrlenW (lpString=".xls") returned 4
	[0062.914] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.914] lstrlenW (lpString=".xlsx") returned 5
	[0062.914] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.914] lstrlenW (lpString=".ppt") returned 4
	[0062.915] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 63
	[0062.915] lstrlenW (lpString=".zip") returned 4
	[0062.915] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.915] lstrlenW (lpString=".rar") returned 4
	[0062.915] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.915] lstrlenW (lpString=".bz2") returned 4
	[0062.915] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.915] lstrlenW (lpString=".7z") returned 3
	[0062.915] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 63
	[0062.915] lstrlenW (lpString=".dbf") returned 4
	[0062.915] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 63
	[0062.915] lstrlenW (lpString=".1cd") returned 4
	[0062.915] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 63
	[0062.915] lstrlenW (lpString=".jpg") returned 4
	[0062.915] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.915] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.915] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0062.916] GetLastError () returned 0x0
	[0062.916] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x60ca, lpOverlapped=0x0) returned 1
	[0062.918] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0x60d0, lpOverlapped=0x0) returned 1
	[0062.919] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.919] WriteFile (in: hFile=0x1d8, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.919] SetEndOfFile (hFile=0x1d8) returned 1
	[0062.919] CloseHandle (hObject=0x1d8) returned 1
	[0062.920] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.920] SetEndOfFile (hFile=0x1b8) returned 1
	[0062.920] CloseHandle (hObject=0x1b8) returned 1
	[0062.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.921] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf")) returned 1
	[0062.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 63
	[0062.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 63
	[0062.921] lstrlenW (lpString=".doc") returned 4
	[0062.921] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0062.921] lstrlenW (lpString=".docx") returned 5
	[0062.921] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0062.921] lstrlenW (lpString=".pdf") returned 4
	[0062.921] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0062.921] lstrlenW (lpString=".xls") returned 4
	[0062.921] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0062.921] lstrlenW (lpString=".xlsx") returned 5
	[0062.921] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0062.921] lstrlenW (lpString=".ppt") returned 4
	[0062.921] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0062.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 63
	[0062.921] lstrlenW (lpString=".zip") returned 4
	[0062.921] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0062.922] lstrlenW (lpString=".rar") returned 4
	[0062.922] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0062.922] lstrlenW (lpString=".bz2") returned 4
	[0062.922] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0062.922] lstrlenW (lpString=".7z") returned 3
	[0062.922] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0062.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 63
	[0062.922] lstrlenW (lpString=".dbf") returned 4
	[0062.922] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0062.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 63
	[0062.922] lstrlenW (lpString=".1cd") returned 4
	[0062.922] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0062.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 63
	[0062.922] lstrlenW (lpString=".jpg") returned 4
	[0062.922] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0062.922] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.101] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0063.102] GetLastError () returned 0x0
	[0063.102] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0xbb7c, lpOverlapped=0x0) returned 1
	[0063.130] WriteFile (in: hFile=0x238, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xbb80, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xbb80, lpOverlapped=0x0) returned 1
	[0063.132] ReadFile (in: hFile=0x1b8, lpBuffer=0x86d0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7c5fed4, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesRead=0x7c5fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.132] WriteFile (in: hFile=0x238, lpBuffer=0x86d0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7c5fc9c, lpOverlapped=0x0 | out: lpBuffer=0x86d0020*, lpNumberOfBytesWritten=0x7c5fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.132] SetEndOfFile (hFile=0x238) returned 1
	[0063.132] CloseHandle (hObject=0x238) returned 1
	[0063.132] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7c5fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.132] SetEndOfFile (hFile=0x1b8) returned 1
	[0063.133] CloseHandle (hObject=0x1b8) returned 1
	[0063.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.133] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf")) returned 1
	[0063.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 63
	[0063.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 63
	[0063.656] lstrlenW (lpString=".doc") returned 4
	[0063.656] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0063.656] lstrlenW (lpString=".docx") returned 5
	[0063.656] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0063.656] lstrlenW (lpString=".pdf") returned 4
	[0063.656] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0063.656] lstrlenW (lpString=".xls") returned 4
	[0063.656] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0063.656] lstrlenW (lpString=".xlsx") returned 5
	[0063.656] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0063.656] lstrlenW (lpString=".ppt") returned 4
	[0063.656] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0063.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 63
	[0063.656] lstrlenW (lpString=".zip") returned 4
	[0063.656] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0063.656] lstrlenW (lpString=".rar") returned 4
	[0063.656] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0063.656] lstrlenW (lpString=".bz2") returned 4
	[0063.656] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0063.656] lstrlenW (lpString=".7z") returned 3
	[0063.656] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0063.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 63
	[0063.656] lstrlenW (lpString=".dbf") returned 4
	[0063.656] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0063.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 63
	[0063.656] lstrlenW (lpString=".1cd") returned 4
	[0063.656] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0063.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 63
	[0063.656] lstrlenW (lpString=".jpg") returned 4
	[0063.656] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1

Thread:
	id = 14
	os_tid = 0xa48

	[0034.811] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x8180070
	[0034.812] lstrlenW (lpString="C:") returned 2
	[0034.812] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x7d9fd00 | out: lpFindFileData=0x7d9fd00*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1002f, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x53ddb88
	[0034.812] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15
	[0034.812] lstrcmpiW (lpString1="C:\\Windows", lpString2="C:\\$Recycle.Bin") returned 1
	[0034.812] lstrlenW (lpString="$Recycle.Bin") returned 12
	[0034.812] lstrcmpiW (lpString1="C:\\Windows", lpString2="$Recycle.Bin") returned 1
	[0034.812] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x8190078
	[0034.813] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15
	[0034.813] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x53ddbc8
	[0034.813] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.813] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0034.813] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 62
	[0034.813] lstrcmpiW (lpString1="C:\\Windows", lpString2="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 1
	[0034.813] lstrlenW (lpString="S-1-5-21-3388679973-3930757225-3770151564-1000") returned 46
	[0034.813] lstrcmpiW (lpString1="C:\\Windows", lpString2="S-1-5-21-3388679973-3930757225-3770151564-1000") returned -1
	[0034.813] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.814] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 62
	[0034.814] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x53ddc08
	[0034.814] FindNextFileW (in: hFindFile=0x53ddc08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.814] FindNextFileW (in: hFindFile=0x53ddc08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0034.814] lstrlenW (lpString="desktop.ini") returned 11
	[0034.814] lstrlenW (lpString=".1cd") returned 4
	[0034.814] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0034.814] lstrlenW (lpString=".3ds") returned 4
	[0034.814] lstrcmpiW (lpString1=".3ds", lpString2=".ini") returned -1
	[0034.814] lstrlenW (lpString=".3fr") returned 4
	[0034.814] lstrcmpiW (lpString1=".3fr", lpString2=".ini") returned -1
	[0034.814] lstrlenW (lpString=".3g2") returned 4
	[0034.814] lstrcmpiW (lpString1=".3g2", lpString2=".ini") returned -1
	[0034.814] lstrlenW (lpString=".3gp") returned 4
	[0034.814] lstrcmpiW (lpString1=".3gp", lpString2=".ini") returned -1
	[0034.814] lstrlenW (lpString=".7z") returned 3
	[0034.814] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0034.814] lstrlenW (lpString=".accda") returned 6
	[0034.814] lstrcmpiW (lpString1=".accda", lpString2="op.ini") returned -1
	[0034.814] lstrlenW (lpString=".accdb") returned 6
	[0034.814] lstrcmpiW (lpString1=".accdb", lpString2="op.ini") returned -1
	[0034.814] lstrlenW (lpString=".accdc") returned 6
	[0034.814] lstrcmpiW (lpString1=".accdc", lpString2="op.ini") returned -1
	[0034.814] lstrlenW (lpString=".accde") returned 6
	[0034.814] lstrcmpiW (lpString1=".accde", lpString2="op.ini") returned -1
	[0034.815] lstrlenW (lpString=".accdt") returned 6
	[0034.815] lstrcmpiW (lpString1=".accdt", lpString2="op.ini") returned -1
	[0034.815] lstrlenW (lpString=".accdw") returned 6
	[0034.815] lstrcmpiW (lpString1=".accdw", lpString2="op.ini") returned -1
	[0034.815] lstrlenW (lpString=".adb") returned 4
	[0034.815] lstrcmpiW (lpString1=".adb", lpString2=".ini") returned -1
	[0034.815] lstrlenW (lpString=".adp") returned 4
	[0034.815] lstrcmpiW (lpString1=".adp", lpString2=".ini") returned -1
	[0034.815] lstrlenW (lpString=".ai") returned 3
	[0034.815] lstrcmpiW (lpString1=".ai", lpString2="ini") returned -1
	[0034.815] lstrlenW (lpString=".ai3") returned 4
	[0034.815] lstrcmpiW (lpString1=".ai3", lpString2=".ini") returned -1
	[0034.815] lstrlenW (lpString=".ai4") returned 4
	[0034.815] lstrcmpiW (lpString1=".ai4", lpString2=".ini") returned -1
	[0034.815] lstrlenW (lpString=".ai5") returned 4
	[0034.815] lstrcmpiW (lpString1=".ai5", lpString2=".ini") returned -1
	[0034.815] lstrlenW (lpString=".ai6") returned 4
	[0034.815] lstrcmpiW (lpString1=".ai6", lpString2=".ini") returned -1
	[0034.815] lstrlenW (lpString=".ai7") returned 4
	[0034.815] lstrcmpiW (lpString1=".ai7", lpString2=".ini") returned -1
	[0034.815] lstrlenW (lpString=".ai8") returned 4
	[0034.815] lstrcmpiW (lpString1=".ai8", lpString2=".ini") returned -1
	[0034.815] lstrlenW (lpString=".anim") returned 5
	[0034.815] lstrcmpiW (lpString1=".anim", lpString2="p.ini") returned -1
	[0034.815] lstrlenW (lpString=".arw") returned 4
	[0034.815] lstrcmpiW (lpString1=".arw", lpString2=".ini") returned -1
	[0034.815] lstrlenW (lpString=".as") returned 3
	[0034.815] lstrcmpiW (lpString1=".as", lpString2="ini") returned -1
	[0034.815] lstrlenW (lpString=".asa") returned 4
	[0034.815] lstrcmpiW (lpString1=".asa", lpString2=".ini") returned -1
	[0034.815] lstrlenW (lpString=".asc") returned 4
	[0034.815] lstrcmpiW (lpString1=".asc", lpString2=".ini") returned -1
	[0034.815] lstrlenW (lpString=".ascx") returned 5
	[0034.815] lstrcmpiW (lpString1=".ascx", lpString2="p.ini") returned -1
	[0034.815] lstrlenW (lpString=".asm") returned 4
	[0034.816] lstrcmpiW (lpString1=".asm", lpString2=".ini") returned -1
	[0034.816] lstrlenW (lpString=".asmx") returned 5
	[0034.816] lstrcmpiW (lpString1=".asmx", lpString2="p.ini") returned -1
	[0034.816] lstrlenW (lpString=".asp") returned 4
	[0034.816] lstrcmpiW (lpString1=".asp", lpString2=".ini") returned -1
	[0034.816] lstrlenW (lpString=".aspx") returned 5
	[0034.816] lstrcmpiW (lpString1=".aspx", lpString2="p.ini") returned -1
	[0034.816] lstrlenW (lpString=".asr") returned 4
	[0034.816] lstrcmpiW (lpString1=".asr", lpString2=".ini") returned -1
	[0034.816] lstrlenW (lpString=".asx") returned 4
	[0034.816] lstrcmpiW (lpString1=".asx", lpString2=".ini") returned -1
	[0034.816] lstrlenW (lpString=".avi") returned 4
	[0034.816] lstrcmpiW (lpString1=".avi", lpString2=".ini") returned -1
	[0034.816] lstrlenW (lpString=".avs") returned 4
	[0034.816] lstrcmpiW (lpString1=".avs", lpString2=".ini") returned -1
	[0034.816] lstrlenW (lpString=".backup") returned 7
	[0034.816] lstrcmpiW (lpString1=".backup", lpString2="top.ini") returned -1
	[0034.816] lstrlenW (lpString=".bak") returned 4
	[0034.816] lstrcmpiW (lpString1=".bak", lpString2=".ini") returned -1
	[0034.816] lstrlenW (lpString=".bay") returned 4
	[0034.816] lstrcmpiW (lpString1=".bay", lpString2=".ini") returned -1
	[0034.816] lstrlenW (lpString=".bd") returned 3
	[0034.816] lstrcmpiW (lpString1=".bd", lpString2="ini") returned -1
	[0034.816] lstrlenW (lpString=".bin") returned 4
	[0034.816] lstrcmpiW (lpString1=".bin", lpString2=".ini") returned -1
	[0034.816] lstrlenW (lpString=".bmp") returned 4
	[0034.816] lstrcmpiW (lpString1=".bmp", lpString2=".ini") returned -1
	[0034.816] lstrlenW (lpString=".bz2") returned 4
	[0034.816] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0034.816] lstrlenW (lpString=".c") returned 2
	[0034.816] lstrcmpiW (lpString1=".c", lpString2="ni") returned -1
	[0034.816] lstrlenW (lpString=".cdr") returned 4
	[0034.816] lstrcmpiW (lpString1=".cdr", lpString2=".ini") returned -1
	[0034.816] lstrlenW (lpString=".cer") returned 4
	[0034.817] lstrcmpiW (lpString1=".cer", lpString2=".ini") returned -1
	[0034.817] lstrlenW (lpString=".cf") returned 3
	[0034.817] lstrcmpiW (lpString1=".cf", lpString2="ini") returned -1
	[0034.817] lstrlenW (lpString=".cfc") returned 4
	[0034.817] lstrcmpiW (lpString1=".cfc", lpString2=".ini") returned -1
	[0034.817] lstrlenW (lpString=".cfm") returned 4
	[0034.817] lstrcmpiW (lpString1=".cfm", lpString2=".ini") returned -1
	[0034.817] lstrlenW (lpString=".cfml") returned 5
	[0034.817] lstrcmpiW (lpString1=".cfml", lpString2="p.ini") returned -1
	[0034.817] lstrlenW (lpString=".cfu") returned 4
	[0034.817] lstrcmpiW (lpString1=".cfu", lpString2=".ini") returned -1
	[0034.817] lstrlenW (lpString=".chm") returned 4
	[0034.817] lstrcmpiW (lpString1=".chm", lpString2=".ini") returned -1
	[0034.817] lstrlenW (lpString=".cin") returned 4
	[0034.817] lstrcmpiW (lpString1=".cin", lpString2=".ini") returned -1
	[0034.817] lstrlenW (lpString=".class") returned 6
	[0034.817] lstrcmpiW (lpString1=".class", lpString2="op.ini") returned -1
	[0034.817] lstrlenW (lpString=".clx") returned 4
	[0034.817] lstrcmpiW (lpString1=".clx", lpString2=".ini") returned -1
	[0034.817] lstrlenW (lpString=".config") returned 7
	[0034.817] lstrcmpiW (lpString1=".config", lpString2="top.ini") returned -1
	[0034.817] lstrlenW (lpString=".cpp") returned 4
	[0034.817] lstrcmpiW (lpString1=".cpp", lpString2=".ini") returned -1
	[0034.817] lstrlenW (lpString=".cr2") returned 4
	[0034.817] lstrcmpiW (lpString1=".cr2", lpString2=".ini") returned -1
	[0034.817] lstrlenW (lpString=".crt") returned 4
	[0034.817] lstrcmpiW (lpString1=".crt", lpString2=".ini") returned -1
	[0034.817] lstrlenW (lpString=".crw") returned 4
	[0034.817] lstrcmpiW (lpString1=".crw", lpString2=".ini") returned -1
	[0034.817] lstrlenW (lpString=".cs") returned 3
	[0034.817] lstrcmpiW (lpString1=".cs", lpString2="ini") returned -1
	[0034.817] lstrlenW (lpString=".css") returned 4
	[0034.817] lstrcmpiW (lpString1=".css", lpString2=".ini") returned -1
	[0034.817] lstrlenW (lpString=".csv") returned 4
	[0034.818] lstrcmpiW (lpString1=".csv", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".cub") returned 4
	[0034.818] lstrcmpiW (lpString1=".cub", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".dae") returned 4
	[0034.818] lstrcmpiW (lpString1=".dae", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".dat") returned 4
	[0034.818] lstrcmpiW (lpString1=".dat", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".db") returned 3
	[0034.818] lstrcmpiW (lpString1=".db", lpString2="ini") returned -1
	[0034.818] lstrlenW (lpString=".dbf") returned 4
	[0034.818] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".dbx") returned 4
	[0034.818] lstrcmpiW (lpString1=".dbx", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".dc3") returned 4
	[0034.818] lstrcmpiW (lpString1=".dc3", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".dcm") returned 4
	[0034.818] lstrcmpiW (lpString1=".dcm", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".dcr") returned 4
	[0034.818] lstrcmpiW (lpString1=".dcr", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".der") returned 4
	[0034.818] lstrcmpiW (lpString1=".der", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".dib") returned 4
	[0034.818] lstrcmpiW (lpString1=".dib", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".dic") returned 4
	[0034.818] lstrcmpiW (lpString1=".dic", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".dif") returned 4
	[0034.818] lstrcmpiW (lpString1=".dif", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".divx") returned 5
	[0034.818] lstrcmpiW (lpString1=".divx", lpString2="p.ini") returned -1
	[0034.818] lstrlenW (lpString=".djvu") returned 5
	[0034.818] lstrcmpiW (lpString1=".djvu", lpString2="p.ini") returned -1
	[0034.818] lstrlenW (lpString=".dng") returned 4
	[0034.818] lstrcmpiW (lpString1=".dng", lpString2=".ini") returned -1
	[0034.818] lstrlenW (lpString=".doc") returned 4
	[0034.819] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0034.819] lstrlenW (lpString=".docm") returned 5
	[0034.819] lstrcmpiW (lpString1=".docm", lpString2="p.ini") returned -1
	[0034.819] lstrlenW (lpString=".docx") returned 5
	[0034.819] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0034.819] lstrlenW (lpString=".dot") returned 4
	[0034.819] lstrcmpiW (lpString1=".dot", lpString2=".ini") returned -1
	[0034.819] lstrlenW (lpString=".dotm") returned 5
	[0034.819] lstrcmpiW (lpString1=".dotm", lpString2="p.ini") returned -1
	[0034.819] lstrlenW (lpString=".dotx") returned 5
	[0034.819] lstrcmpiW (lpString1=".dotx", lpString2="p.ini") returned -1
	[0034.819] lstrlenW (lpString=".dpx") returned 4
	[0034.819] lstrcmpiW (lpString1=".dpx", lpString2=".ini") returned -1
	[0034.819] lstrlenW (lpString=".dqy") returned 4
	[0034.819] lstrcmpiW (lpString1=".dqy", lpString2=".ini") returned -1
	[0034.819] lstrlenW (lpString=".dsn") returned 4
	[0034.819] lstrcmpiW (lpString1=".dsn", lpString2=".ini") returned -1
	[0034.819] lstrlenW (lpString=".dt") returned 3
	[0034.819] lstrcmpiW (lpString1=".dt", lpString2="ini") returned -1
	[0034.819] lstrlenW (lpString=".dtd") returned 4
	[0034.819] lstrcmpiW (lpString1=".dtd", lpString2=".ini") returned -1
	[0034.819] lstrlenW (lpString=".dwg") returned 4
	[0034.819] lstrcmpiW (lpString1=".dwg", lpString2=".ini") returned -1
	[0034.819] lstrlenW (lpString=".dwt") returned 4
	[0034.819] lstrcmpiW (lpString1=".dwt", lpString2=".ini") returned -1
	[0034.819] lstrlenW (lpString=".dx") returned 3
	[0034.819] lstrcmpiW (lpString1=".dx", lpString2="ini") returned -1
	[0034.819] lstrlenW (lpString=".dxf") returned 4
	[0034.819] lstrcmpiW (lpString1=".dxf", lpString2=".ini") returned -1
	[0034.819] lstrlenW (lpString=".edml") returned 5
	[0034.819] lstrcmpiW (lpString1=".edml", lpString2="p.ini") returned -1
	[0034.819] lstrlenW (lpString=".efd") returned 4
	[0034.819] lstrcmpiW (lpString1=".efd", lpString2=".ini") returned -1
	[0034.819] lstrlenW (lpString=".elf") returned 4
	[0034.819] lstrcmpiW (lpString1=".elf", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".emf") returned 4
	[0034.820] lstrcmpiW (lpString1=".emf", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".emz") returned 4
	[0034.820] lstrcmpiW (lpString1=".emz", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".epf") returned 4
	[0034.820] lstrcmpiW (lpString1=".epf", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".eps") returned 4
	[0034.820] lstrcmpiW (lpString1=".eps", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".epsf") returned 5
	[0034.820] lstrcmpiW (lpString1=".epsf", lpString2="p.ini") returned -1
	[0034.820] lstrlenW (lpString=".epsp") returned 5
	[0034.820] lstrcmpiW (lpString1=".epsp", lpString2="p.ini") returned -1
	[0034.820] lstrlenW (lpString=".erf") returned 4
	[0034.820] lstrcmpiW (lpString1=".erf", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".exr") returned 4
	[0034.820] lstrcmpiW (lpString1=".exr", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".f4v") returned 4
	[0034.820] lstrcmpiW (lpString1=".f4v", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".fido") returned 5
	[0034.820] lstrcmpiW (lpString1=".fido", lpString2="p.ini") returned -1
	[0034.820] lstrlenW (lpString=".flm") returned 4
	[0034.820] lstrcmpiW (lpString1=".flm", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".flv") returned 4
	[0034.820] lstrcmpiW (lpString1=".flv", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".frm") returned 4
	[0034.820] lstrcmpiW (lpString1=".frm", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".fxg") returned 4
	[0034.820] lstrcmpiW (lpString1=".fxg", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".geo") returned 4
	[0034.820] lstrcmpiW (lpString1=".geo", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".gif") returned 4
	[0034.820] lstrcmpiW (lpString1=".gif", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".grs") returned 4
	[0034.820] lstrcmpiW (lpString1=".grs", lpString2=".ini") returned -1
	[0034.820] lstrlenW (lpString=".gz") returned 3
	[0034.821] lstrcmpiW (lpString1=".gz", lpString2="ini") returned -1
	[0034.821] lstrlenW (lpString=".h") returned 2
	[0034.821] lstrcmpiW (lpString1=".h", lpString2="ni") returned -1
	[0034.821] lstrlenW (lpString=".hdr") returned 4
	[0034.821] lstrcmpiW (lpString1=".hdr", lpString2=".ini") returned -1
	[0034.821] lstrlenW (lpString=".hpp") returned 4
	[0034.821] lstrcmpiW (lpString1=".hpp", lpString2=".ini") returned -1
	[0034.821] lstrlenW (lpString=".hta") returned 4
	[0034.821] lstrcmpiW (lpString1=".hta", lpString2=".ini") returned -1
	[0034.821] lstrlenW (lpString=".htc") returned 4
	[0034.821] lstrcmpiW (lpString1=".htc", lpString2=".ini") returned -1
	[0034.821] lstrlenW (lpString=".htm") returned 4
	[0034.821] lstrcmpiW (lpString1=".htm", lpString2=".ini") returned -1
	[0034.821] lstrlenW (lpString=".html") returned 5
	[0034.821] lstrcmpiW (lpString1=".html", lpString2="p.ini") returned -1
	[0034.821] lstrlenW (lpString=".icb") returned 4
	[0034.821] lstrcmpiW (lpString1=".icb", lpString2=".ini") returned -1
	[0034.821] lstrlenW (lpString=".ics") returned 4
	[0034.821] lstrcmpiW (lpString1=".ics", lpString2=".ini") returned -1
	[0034.821] lstrlenW (lpString=".iff") returned 4
	[0034.821] lstrcmpiW (lpString1=".iff", lpString2=".ini") returned -1
	[0034.821] lstrlenW (lpString=".inc") returned 4
	[0034.821] lstrcmpiW (lpString1=".inc", lpString2=".ini") returned -1
	[0034.821] lstrlenW (lpString=".indd") returned 5
	[0034.821] lstrcmpiW (lpString1=".indd", lpString2="p.ini") returned -1
	[0034.821] lstrlenW (lpString=".ini") returned 4
	[0034.821] lstrcmpiW (lpString1=".ini", lpString2=".ini") returned 0
	[0034.821] lstrlenW (lpString="desktop.ini") returned 11
	[0034.821] lstrlenW (lpString=".beets") returned 6
	[0034.821] lstrcmpiW (lpString1=".beets", lpString2="op.ini") returned -1
	[0034.821] lstrlenW (lpString="desktop.ini") returned 11
	[0034.821] lstrcmpiW (lpString1="boot.ini", lpString2="desktop.ini") returned -1
	[0034.821] lstrcmpiW (lpString1="bootfont.bin", lpString2="desktop.ini") returned -1
	[0034.822] lstrcmpiW (lpString1="ntldr", lpString2="desktop.ini") returned 1
	[0034.822] lstrcmpiW (lpString1="ntdetect.com", lpString2="desktop.ini") returned 1
	[0034.822] lstrcmpiW (lpString1="io.sys", lpString2="desktop.ini") returned 1
	[0034.822] lstrcmpiW (lpString1="RETURN FILES.txt", lpString2="desktop.ini") returned 1
	[0034.822] lstrcmpiW (lpString1="Info.hta", lpString2="desktop.ini") returned 1
	[0034.822] lstrcmpiW (lpString1="demo.exe", lpString2="desktop.ini") returned -1
	[0034.822] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini") returned 74
	[0034.822] FindNextFileW (in: hFindFile=0x53ddc08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0034.822] FindClose (in: hFindFile=0x53ddc08 | out: hFindFile=0x53ddc08) returned 1
	[0034.822] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.822] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0034.822] FindClose (in: hFindFile=0x53ddbc8 | out: hFindFile=0x53ddbc8) returned 1
	[0034.822] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8190078 | out: hHeap=0x5350000) returned 1
	[0034.822] FindNextFileW (in: hFindFile=0x53ddb88, lpFindFileData=0x7d9fd00 | out: lpFindFileData=0x7d9fd00*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1002f, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0034.822] lstrlenW (lpString="C:\\Boot") returned 7
	[0034.822] lstrcmpiW (lpString1="C:\\Windows", lpString2="C:\\Boot") returned 1
	[0034.822] lstrlenW (lpString="Boot") returned 4
	[0034.822] lstrcmpiW (lpString1="C:\\Windows", lpString2="Boot") returned 1
	[0034.822] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x8190078
	[0034.822] lstrlenW (lpString="C:\\Boot") returned 7
	[0034.822] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x53ddbc8
	[0034.823] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.823] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0034.823] lstrlenW (lpString="BCD") returned 3
	[0034.823] lstrlenW (lpString=".1cd") returned 4
	[0034.823] lstrcmpiW (lpString1=".1cd", lpString2="") returned 1
	[0034.823] lstrlenW (lpString=".3ds") returned 4
	[0034.823] lstrcmpiW (lpString1=".3ds", lpString2="") returned 1
	[0034.823] lstrlenW (lpString=".3fr") returned 4
	[0034.823] lstrcmpiW (lpString1=".3fr", lpString2="") returned 1
	[0034.823] lstrlenW (lpString=".3g2") returned 4
	[0034.823] lstrcmpiW (lpString1=".3g2", lpString2="") returned 1
	[0034.823] lstrlenW (lpString=".3gp") returned 4
	[0034.823] lstrcmpiW (lpString1=".3gp", lpString2="") returned 1
	[0034.823] lstrlenW (lpString=".7z") returned 3
	[0034.823] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0034.823] lstrlenW (lpString=".accda") returned 6
	[0034.823] lstrcmpiW (lpString1=".accda", lpString2="") returned 1
	[0034.823] lstrlenW (lpString=".accdb") returned 6
	[0034.823] lstrcmpiW (lpString1=".accdb", lpString2="") returned 1
	[0034.823] lstrlenW (lpString=".accdc") returned 6
	[0034.823] lstrcmpiW (lpString1=".accdc", lpString2="") returned 1
	[0034.823] lstrlenW (lpString=".accde") returned 6
	[0034.823] lstrcmpiW (lpString1=".accde", lpString2="") returned 1
	[0034.823] lstrlenW (lpString=".accdt") returned 6
	[0034.823] lstrcmpiW (lpString1=".accdt", lpString2="") returned 1
	[0034.823] lstrlenW (lpString=".accdw") returned 6
	[0034.823] lstrcmpiW (lpString1=".accdw", lpString2="") returned 1
	[0034.823] lstrlenW (lpString=".adb") returned 4
	[0034.823] lstrcmpiW (lpString1=".adb", lpString2="") returned 1
	[0034.823] lstrlenW (lpString=".adp") returned 4
	[0034.823] lstrcmpiW (lpString1=".adp", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".ai") returned 3
	[0034.824] lstrcmpiW (lpString1=".ai", lpString2="BCD") returned -1
	[0034.824] lstrlenW (lpString=".ai3") returned 4
	[0034.824] lstrcmpiW (lpString1=".ai3", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".ai4") returned 4
	[0034.824] lstrcmpiW (lpString1=".ai4", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".ai5") returned 4
	[0034.824] lstrcmpiW (lpString1=".ai5", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".ai6") returned 4
	[0034.824] lstrcmpiW (lpString1=".ai6", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".ai7") returned 4
	[0034.824] lstrcmpiW (lpString1=".ai7", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".ai8") returned 4
	[0034.824] lstrcmpiW (lpString1=".ai8", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".anim") returned 5
	[0034.824] lstrcmpiW (lpString1=".anim", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".arw") returned 4
	[0034.824] lstrcmpiW (lpString1=".arw", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".as") returned 3
	[0034.824] lstrcmpiW (lpString1=".as", lpString2="BCD") returned -1
	[0034.824] lstrlenW (lpString=".asa") returned 4
	[0034.824] lstrcmpiW (lpString1=".asa", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".asc") returned 4
	[0034.824] lstrcmpiW (lpString1=".asc", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".ascx") returned 5
	[0034.824] lstrcmpiW (lpString1=".ascx", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".asm") returned 4
	[0034.824] lstrcmpiW (lpString1=".asm", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".asmx") returned 5
	[0034.824] lstrcmpiW (lpString1=".asmx", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".asp") returned 4
	[0034.824] lstrcmpiW (lpString1=".asp", lpString2="") returned 1
	[0034.824] lstrlenW (lpString=".aspx") returned 5
	[0034.824] lstrcmpiW (lpString1=".aspx", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".asr") returned 4
	[0034.825] lstrcmpiW (lpString1=".asr", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".asx") returned 4
	[0034.825] lstrcmpiW (lpString1=".asx", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".avi") returned 4
	[0034.825] lstrcmpiW (lpString1=".avi", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".avs") returned 4
	[0034.825] lstrcmpiW (lpString1=".avs", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".backup") returned 7
	[0034.825] lstrcmpiW (lpString1=".backup", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".bak") returned 4
	[0034.825] lstrcmpiW (lpString1=".bak", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".bay") returned 4
	[0034.825] lstrcmpiW (lpString1=".bay", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".bd") returned 3
	[0034.825] lstrcmpiW (lpString1=".bd", lpString2="BCD") returned -1
	[0034.825] lstrlenW (lpString=".bin") returned 4
	[0034.825] lstrcmpiW (lpString1=".bin", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".bmp") returned 4
	[0034.825] lstrcmpiW (lpString1=".bmp", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".bz2") returned 4
	[0034.825] lstrcmpiW (lpString1=".bz2", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".c") returned 2
	[0034.825] lstrcmpiW (lpString1=".c", lpString2="CD") returned -1
	[0034.825] lstrlenW (lpString=".cdr") returned 4
	[0034.825] lstrcmpiW (lpString1=".cdr", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".cer") returned 4
	[0034.825] lstrcmpiW (lpString1=".cer", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".cf") returned 3
	[0034.825] lstrcmpiW (lpString1=".cf", lpString2="BCD") returned -1
	[0034.825] lstrlenW (lpString=".cfc") returned 4
	[0034.825] lstrcmpiW (lpString1=".cfc", lpString2="") returned 1
	[0034.825] lstrlenW (lpString=".cfm") returned 4
	[0034.825] lstrcmpiW (lpString1=".cfm", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".cfml") returned 5
	[0034.826] lstrcmpiW (lpString1=".cfml", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".cfu") returned 4
	[0034.826] lstrcmpiW (lpString1=".cfu", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".chm") returned 4
	[0034.826] lstrcmpiW (lpString1=".chm", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".cin") returned 4
	[0034.826] lstrcmpiW (lpString1=".cin", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".class") returned 6
	[0034.826] lstrcmpiW (lpString1=".class", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".clx") returned 4
	[0034.826] lstrcmpiW (lpString1=".clx", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".config") returned 7
	[0034.826] lstrcmpiW (lpString1=".config", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".cpp") returned 4
	[0034.826] lstrcmpiW (lpString1=".cpp", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".cr2") returned 4
	[0034.826] lstrcmpiW (lpString1=".cr2", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".crt") returned 4
	[0034.826] lstrcmpiW (lpString1=".crt", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".crw") returned 4
	[0034.826] lstrcmpiW (lpString1=".crw", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".cs") returned 3
	[0034.826] lstrcmpiW (lpString1=".cs", lpString2="BCD") returned -1
	[0034.826] lstrlenW (lpString=".css") returned 4
	[0034.826] lstrcmpiW (lpString1=".css", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".csv") returned 4
	[0034.826] lstrcmpiW (lpString1=".csv", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".cub") returned 4
	[0034.826] lstrcmpiW (lpString1=".cub", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".dae") returned 4
	[0034.826] lstrcmpiW (lpString1=".dae", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".dat") returned 4
	[0034.826] lstrcmpiW (lpString1=".dat", lpString2="") returned 1
	[0034.826] lstrlenW (lpString=".db") returned 3
	[0034.827] lstrcmpiW (lpString1=".db", lpString2="BCD") returned -1
	[0034.827] lstrlenW (lpString=".dbf") returned 4
	[0034.827] lstrcmpiW (lpString1=".dbf", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".dbx") returned 4
	[0034.827] lstrcmpiW (lpString1=".dbx", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".dc3") returned 4
	[0034.827] lstrcmpiW (lpString1=".dc3", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".dcm") returned 4
	[0034.827] lstrcmpiW (lpString1=".dcm", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".dcr") returned 4
	[0034.827] lstrcmpiW (lpString1=".dcr", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".der") returned 4
	[0034.827] lstrcmpiW (lpString1=".der", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".dib") returned 4
	[0034.827] lstrcmpiW (lpString1=".dib", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".dic") returned 4
	[0034.827] lstrcmpiW (lpString1=".dic", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".dif") returned 4
	[0034.827] lstrcmpiW (lpString1=".dif", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".divx") returned 5
	[0034.827] lstrcmpiW (lpString1=".divx", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".djvu") returned 5
	[0034.827] lstrcmpiW (lpString1=".djvu", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".dng") returned 4
	[0034.827] lstrcmpiW (lpString1=".dng", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".doc") returned 4
	[0034.827] lstrcmpiW (lpString1=".doc", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".docm") returned 5
	[0034.827] lstrcmpiW (lpString1=".docm", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".docx") returned 5
	[0034.827] lstrcmpiW (lpString1=".docx", lpString2="") returned 1
	[0034.827] lstrlenW (lpString=".dot") returned 4
	[0034.827] lstrcmpiW (lpString1=".dot", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".dotm") returned 5
	[0034.828] lstrcmpiW (lpString1=".dotm", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".dotx") returned 5
	[0034.828] lstrcmpiW (lpString1=".dotx", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".dpx") returned 4
	[0034.828] lstrcmpiW (lpString1=".dpx", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".dqy") returned 4
	[0034.828] lstrcmpiW (lpString1=".dqy", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".dsn") returned 4
	[0034.828] lstrcmpiW (lpString1=".dsn", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".dt") returned 3
	[0034.828] lstrcmpiW (lpString1=".dt", lpString2="BCD") returned -1
	[0034.828] lstrlenW (lpString=".dtd") returned 4
	[0034.828] lstrcmpiW (lpString1=".dtd", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".dwg") returned 4
	[0034.828] lstrcmpiW (lpString1=".dwg", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".dwt") returned 4
	[0034.828] lstrcmpiW (lpString1=".dwt", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".dx") returned 3
	[0034.828] lstrcmpiW (lpString1=".dx", lpString2="BCD") returned -1
	[0034.828] lstrlenW (lpString=".dxf") returned 4
	[0034.828] lstrcmpiW (lpString1=".dxf", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".edml") returned 5
	[0034.828] lstrcmpiW (lpString1=".edml", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".efd") returned 4
	[0034.828] lstrcmpiW (lpString1=".efd", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".elf") returned 4
	[0034.828] lstrcmpiW (lpString1=".elf", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".emf") returned 4
	[0034.828] lstrcmpiW (lpString1=".emf", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".emz") returned 4
	[0034.828] lstrcmpiW (lpString1=".emz", lpString2="") returned 1
	[0034.828] lstrlenW (lpString=".epf") returned 4
	[0034.828] lstrcmpiW (lpString1=".epf", lpString2="") returned 1
	[0034.829] lstrlenW (lpString=".eps") returned 4
	[0034.829] lstrcmpiW (lpString1=".eps", lpString2="") returned 1
	[0034.829] lstrlenW (lpString=".epsf") returned 5
	[0034.829] lstrcmpiW (lpString1=".epsf", lpString2="") returned 1
	[0034.829] lstrlenW (lpString=".epsp") returned 5
	[0034.829] lstrcmpiW (lpString1=".epsp", lpString2="") returned 1
	[0034.829] lstrlenW (lpString=".erf") returned 4
	[0034.829] lstrcmpiW (lpString1=".erf", lpString2="") returned 1
	[0034.829] lstrlenW (lpString=".exr") returned 4
	[0034.829] lstrcmpiW (lpString1=".exr", lpString2="") returned 1
	[0034.829] lstrlenW (lpString=".f4v") returned 4
	[0034.829] lstrcmpiW (lpString1=".f4v", lpString2="") returned 1
	[0034.829] lstrlenW (lpString=".fido") returned 5
	[0034.829] lstrcmpiW (lpString1=".fido", lpString2="") returned 1
	[0034.829] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.829] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.830] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.830] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.831] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.831] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.831] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0034.831] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.831] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.832] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.832] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.832] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.832] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.832] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0034.832] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.832] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.833] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.833] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.833] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.833] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.833] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0034.833] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.833] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.833] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.833] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.834] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.834] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.834] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0034.834] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.834] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.835] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.835] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.835] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.835] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.835] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0034.835] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.835] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.836] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.836] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.836] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.836] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.836] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0034.836] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.836] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.837] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.837] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.837] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.837] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.837] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0034.837] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.837] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.838] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.838] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0034.838] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.838] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.838] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0034.838] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.838] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.839] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.839] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.839] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.839] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.839] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0034.839] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.839] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.840] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.840] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.840] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.840] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.840] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0034.840] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.840] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.841] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.841] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.841] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.841] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.841] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0034.841] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.841] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.841] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.842] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.842] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.842] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.842] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0034.842] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.842] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.843] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.843] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.843] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.843] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.843] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0034.843] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.843] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.844] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.844] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.844] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.844] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.844] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0034.844] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.844] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.845] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.845] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.845] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.845] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.845] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0034.846] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.846] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.846] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.846] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.846] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.846] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.846] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0034.846] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.846] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.872] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.872] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.872] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.872] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.872] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0034.872] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.872] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.872] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.872] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.873] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.873] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.873] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0034.873] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.873] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.992] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.992] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.992] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.992] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.992] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0034.992] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.992] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0034.993] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0034.993] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0034.993] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0034.993] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0034.993] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0034.993] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0034.993] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0035.030] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.030] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0035.030] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0035.030] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0035.030] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0035.030] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0035.030] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0035.031] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.031] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0035.031] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0035.031] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0035.031] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0035.031] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0035.031] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0035.171] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.172] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0035.172] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0035.172] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0035.172] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0035.172] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0035.172] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5440a08
	[0035.172] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.172] FindNextFileW (in: hFindFile=0x5440a08, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0035.173] FindClose (in: hFindFile=0x5440a08 | out: hFindFile=0x5440a08) returned 1
	[0035.173] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x81a0080 | out: hHeap=0x5350000) returned 1
	[0035.173] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0035.173] FindClose (in: hFindFile=0x53ddbc8 | out: hFindFile=0x53ddbc8) returned 1
	[0035.173] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8190078 | out: hHeap=0x5350000) returned 1
	[0035.173] FindNextFileW (in: hFindFile=0x53ddb88, lpFindFileData=0x7d9fd00 | out: lpFindFileData=0x7d9fd00*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x1002f, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0035.173] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x8190078
	[0035.173] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x53ddbc8
	[0035.173] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.173] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0035.173] FindClose (in: hFindFile=0x53ddbc8 | out: hFindFile=0x53ddbc8) returned 1
	[0035.174] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8190078 | out: hHeap=0x5350000) returned 1
	[0035.174] FindNextFileW (in: hFindFile=0x53ddb88, lpFindFileData=0x7d9fd00 | out: lpFindFileData=0x7d9fd00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0035.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x8190078
	[0035.174] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="\xe3f0\x53e\x16")) returned 0xffffffff
	[0035.174] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8190078 | out: hHeap=0x5350000) returned 1
	[0035.174] FindNextFileW (in: hFindFile=0x53ddb88, lpFindFileData=0x7d9fd00 | out: lpFindFileData=0x7d9fd00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0035.174] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x8190078
	[0035.174] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x53ddbc8
	[0035.175] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.175] FindNextFileW (in: hFindFile=0x53ddbc8, lpFindFileData=0x7d9fa84 | out: lpFindFileData=0x7d9fa84*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0035.175] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81a0080
	[0035.175] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x53de408
	[0035.280] FindNextFileW (in: hFindFile=0x53de408, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.802] FindNextFileW (in: hFindFile=0x53de408, lpFindFileData=0x7d9f808 | out: lpFindFileData=0x7d9f808*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1
	[0035.802] lstrcmpiW (lpString1="C:\\Windows", lpString2="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C") returned 1
	[0035.802] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x81b0088
	[0035.823] FindNextFileW (in: hFindFile=0x53de448, lpFindFileData=0x7d9f58c | out: lpFindFileData=0x7d9f58c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.823] FindNextFileW (in: hFindFile=0x53de448, lpFindFileData=0x7d9f58c | out: lpFindFileData=0x7d9f58c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1
	[0041.392] FindNextFileW (in: hFindFile=0x53e8900, lpFindFileData=0x7d9f094 | out: lpFindFileData=0x7d9f094*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0041.392] FindNextFileW (in: hFindFile=0x53e8900, lpFindFileData=0x7d9f094 | out: lpFindFileData=0x7d9f094*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x992c8400, ftCreationTime.dwHighDateTime=0x1bd5de4, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x992c8400, ftLastWriteTime.dwHighDateTime=0x1bd5de4, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10253_.GIF", cAlternateFileName="")) returned 1

Thread:
	id = 15
	os_tid = 0xa4c

	[0035.833] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x81c0090
	[0035.833] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x81d0098
	[0035.833] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0a70
	[0035.833] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x6) returned 0x53dd738
	[0035.834] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0a88
	[0035.834] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x100000) returned 0x8920020
	[0035.834] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0aa0
	[0035.834] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0aa0, Size=0x20) returned 0x53e7088
	[0035.834] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0aa0
	[0035.834] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0aa0, Size=0x20) returned 0x53e70b0
	[0035.834] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0035.834] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0035.834] Wow64DisableWow64FsRedirection (in: OldValue=0x7edff58 | out: OldValue=0x7edff58*=0x0) returned 1
	[0035.834] lstrlenW (lpString="kernel32.dll") returned 12
	[0035.834] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e7088 | out: hHeap=0x5350000) returned 1
	[0035.834] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0035.834] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e70b0 | out: hHeap=0x5350000) returned 1
	[0035.834] Sleep (dwMilliseconds=0x64) 
	[0036.182] lstrcmpiW (lpString1=".ttf", lpString2=".beets") returned 1
	[0036.182] lstrlenW (lpString="kor_boot.ttf") returned 12
	[0036.182] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0036.360] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=2371360) returned 1
	[0036.360] CloseHandle (hObject=0x1b8) returned 1
	[0036.360] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20
	[0036.360] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.360] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\kor_boot.ttf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0036.361] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0036.361] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0036.361] lstrlenW (lpString=".doc") returned 4
	[0036.361] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0036.361] lstrlenW (lpString=".docx") returned 5
	[0036.361] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0036.361] lstrlenW (lpString=".pdf") returned 4
	[0036.361] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0036.361] lstrlenW (lpString=".xls") returned 4
	[0036.361] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0036.361] lstrlenW (lpString=".xlsx") returned 5
	[0036.361] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0036.361] lstrlenW (lpString=".ppt") returned 4
	[0036.361] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0036.361] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0036.361] lstrlenW (lpString=".zip") returned 4
	[0036.361] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0036.361] lstrlenW (lpString=".rar") returned 4
	[0036.361] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0036.361] lstrlenW (lpString=".bz2") returned 4
	[0036.361] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0036.361] lstrlenW (lpString=".7z") returned 3
	[0036.361] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0036.361] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0036.361] lstrlenW (lpString=".dbf") returned 4
	[0036.361] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0036.361] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0036.361] lstrlenW (lpString=".1cd") returned 4
	[0036.362] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0036.362] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0036.362] lstrlenW (lpString=".jpg") returned 4
	[0036.362] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0036.362] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0036.362] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0036.362] lstrlenW (lpString=".doc") returned 4
	[0036.362] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0036.362] lstrlenW (lpString=".docx") returned 5
	[0036.362] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0036.362] lstrlenW (lpString=".pdf") returned 4
	[0036.362] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0036.362] lstrlenW (lpString=".xls") returned 4
	[0036.362] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0036.362] lstrlenW (lpString=".xlsx") returned 5
	[0036.362] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0036.362] lstrlenW (lpString=".ppt") returned 4
	[0036.362] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0036.362] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0036.362] lstrlenW (lpString=".zip") returned 4
	[0036.362] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0036.362] lstrlenW (lpString=".rar") returned 4
	[0036.362] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0036.362] lstrlenW (lpString=".bz2") returned 4
	[0036.362] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0036.362] lstrlenW (lpString=".7z") returned 3
	[0036.362] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0036.363] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0036.363] lstrlenW (lpString=".dbf") returned 4
	[0036.363] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0036.363] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0036.363] lstrlenW (lpString=".1cd") returned 4
	[0036.363] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0036.363] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0036.363] lstrlenW (lpString=".jpg") returned 4
	[0036.363] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0036.363] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0036.363] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0036.363] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0036.363] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=93248) returned 1
	[0036.363] CloseHandle (hObject=0x1b8) returned 1
	[0036.366] GetFileAttributesW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20
	[0036.367] GetFileAttributesW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.367] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0036.367] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0036.367] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0036.367] lstrlenW (lpString=".doc") returned 4
	[0036.367] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.367] lstrlenW (lpString=".docx") returned 5
	[0036.367] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.367] lstrlenW (lpString=".pdf") returned 4
	[0036.367] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.367] lstrlenW (lpString=".xls") returned 4
	[0036.367] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.367] lstrlenW (lpString=".xlsx") returned 5
	[0036.367] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.367] lstrlenW (lpString=".ppt") returned 4
	[0036.367] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.367] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0036.367] lstrlenW (lpString=".zip") returned 4
	[0036.367] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.367] lstrlenW (lpString=".rar") returned 4
	[0036.367] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.368] lstrlenW (lpString=".bz2") returned 4
	[0036.368] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.368] lstrlenW (lpString=".7z") returned 3
	[0036.368] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.368] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0036.368] lstrlenW (lpString=".dbf") returned 4
	[0036.368] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.368] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0036.368] lstrlenW (lpString=".1cd") returned 4
	[0036.368] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.368] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0036.368] lstrlenW (lpString=".jpg") returned 4
	[0036.368] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.368] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0036.368] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0036.368] lstrlenW (lpString=".doc") returned 4
	[0036.368] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.368] lstrlenW (lpString=".docx") returned 5
	[0036.368] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.368] lstrlenW (lpString=".pdf") returned 4
	[0036.368] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.368] lstrlenW (lpString=".xls") returned 4
	[0036.368] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.368] lstrlenW (lpString=".xlsx") returned 5
	[0036.368] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.368] lstrlenW (lpString=".ppt") returned 4
	[0036.369] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.369] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0036.369] lstrlenW (lpString=".zip") returned 4
	[0036.369] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.369] lstrlenW (lpString=".rar") returned 4
	[0036.369] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.369] lstrlenW (lpString=".bz2") returned 4
	[0036.369] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.369] lstrlenW (lpString=".7z") returned 3
	[0036.369] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.369] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0036.369] lstrlenW (lpString=".dbf") returned 4
	[0036.369] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.369] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0036.369] lstrlenW (lpString=".1cd") returned 4
	[0036.369] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.369] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0036.369] lstrlenW (lpString=".jpg") returned 4
	[0036.369] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.369] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0036.369] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0036.370] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0036.370] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=90688) returned 1
	[0036.370] CloseHandle (hObject=0x1b8) returned 1
	[0036.370] GetFileAttributesW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20
	[0036.370] GetFileAttributesW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.370] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0036.370] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29
	[0036.370] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29
	[0036.370] lstrlenW (lpString=".doc") returned 4
	[0036.370] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.370] lstrlenW (lpString=".docx") returned 5
	[0036.370] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.371] lstrlenW (lpString=".pdf") returned 4
	[0036.371] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.371] lstrlenW (lpString=".xls") returned 4
	[0036.371] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.371] lstrlenW (lpString=".xlsx") returned 5
	[0036.371] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.371] lstrlenW (lpString=".ppt") returned 4
	[0036.371] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.371] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29
	[0036.371] lstrlenW (lpString=".zip") returned 4
	[0036.371] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.371] lstrlenW (lpString=".rar") returned 4
	[0036.371] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.371] lstrlenW (lpString=".bz2") returned 4
	[0036.371] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.371] lstrlenW (lpString=".7z") returned 3
	[0036.372] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.372] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29
	[0036.372] lstrlenW (lpString=".dbf") returned 4
	[0036.372] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.372] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29
	[0036.372] lstrlenW (lpString=".1cd") returned 4
	[0036.372] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.372] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29
	[0036.372] lstrlenW (lpString=".jpg") returned 4
	[0036.372] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.372] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29
	[0036.372] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29
	[0036.372] lstrlenW (lpString=".doc") returned 4
	[0036.372] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.372] lstrlenW (lpString=".docx") returned 5
	[0036.372] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.372] lstrlenW (lpString=".pdf") returned 4
	[0036.372] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.372] lstrlenW (lpString=".xls") returned 4
	[0036.372] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.372] lstrlenW (lpString=".xlsx") returned 5
	[0036.372] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.372] lstrlenW (lpString=".ppt") returned 4
	[0036.372] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.372] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29
	[0036.373] lstrlenW (lpString=".zip") returned 4
	[0036.373] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.373] lstrlenW (lpString=".rar") returned 4
	[0036.373] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.373] lstrlenW (lpString=".bz2") returned 4
	[0036.373] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.373] lstrlenW (lpString=".7z") returned 3
	[0036.373] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.373] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29
	[0036.373] lstrlenW (lpString=".dbf") returned 4
	[0036.373] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.373] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29
	[0036.373] lstrlenW (lpString=".1cd") returned 4
	[0036.373] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.373] lstrlenW (lpString="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 29
	[0036.373] lstrlenW (lpString=".jpg") returned 4
	[0036.373] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.373] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0036.373] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0036.373] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0036.374] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=90704) returned 1
	[0036.374] CloseHandle (hObject=0x1b8) returned 1
	[0036.374] GetFileAttributesW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20
	[0036.374] GetFileAttributesW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.374] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0036.374] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29
	[0036.374] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29
	[0036.374] lstrlenW (lpString=".doc") returned 4
	[0036.374] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.374] lstrlenW (lpString=".docx") returned 5
	[0036.374] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.374] lstrlenW (lpString=".pdf") returned 4
	[0036.374] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.374] lstrlenW (lpString=".xls") returned 4
	[0036.375] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.375] lstrlenW (lpString=".xlsx") returned 5
	[0036.375] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.375] lstrlenW (lpString=".ppt") returned 4
	[0036.375] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.375] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29
	[0036.375] lstrlenW (lpString=".zip") returned 4
	[0036.375] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.375] lstrlenW (lpString=".rar") returned 4
	[0036.375] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.375] lstrlenW (lpString=".bz2") returned 4
	[0036.375] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.375] lstrlenW (lpString=".7z") returned 3
	[0036.375] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.375] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29
	[0036.375] lstrlenW (lpString=".dbf") returned 4
	[0036.375] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.375] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29
	[0036.375] lstrlenW (lpString=".1cd") returned 4
	[0036.375] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.375] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29
	[0036.375] lstrlenW (lpString=".jpg") returned 4
	[0036.375] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.375] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29
	[0036.375] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29
	[0036.376] lstrlenW (lpString=".doc") returned 4
	[0036.376] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.376] lstrlenW (lpString=".docx") returned 5
	[0036.376] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.376] lstrlenW (lpString=".pdf") returned 4
	[0036.376] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.376] lstrlenW (lpString=".xls") returned 4
	[0036.376] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.376] lstrlenW (lpString=".xlsx") returned 5
	[0036.376] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.376] lstrlenW (lpString=".ppt") returned 4
	[0036.376] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.376] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29
	[0036.376] lstrlenW (lpString=".zip") returned 4
	[0036.376] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.376] lstrlenW (lpString=".rar") returned 4
	[0036.376] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.376] lstrlenW (lpString=".bz2") returned 4
	[0036.376] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.376] lstrlenW (lpString=".7z") returned 3
	[0036.376] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.376] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29
	[0036.376] lstrlenW (lpString=".dbf") returned 4
	[0036.376] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.376] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29
	[0036.376] lstrlenW (lpString=".1cd") returned 4
	[0036.377] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.377] lstrlenW (lpString="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 29
	[0036.377] lstrlenW (lpString=".jpg") returned 4
	[0036.377] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.377] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0036.377] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0036.377] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0036.377] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=76352) returned 1
	[0036.377] CloseHandle (hObject=0x1b8) returned 1
	[0036.377] GetFileAttributesW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20
	[0036.377] GetFileAttributesW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.378] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0036.378] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29
	[0036.378] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29
	[0036.378] lstrlenW (lpString=".doc") returned 4
	[0036.378] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.378] lstrlenW (lpString=".docx") returned 5
	[0036.378] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.378] lstrlenW (lpString=".pdf") returned 4
	[0036.378] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.378] lstrlenW (lpString=".xls") returned 4
	[0036.378] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.378] lstrlenW (lpString=".xlsx") returned 5
	[0036.378] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.378] lstrlenW (lpString=".ppt") returned 4
	[0036.378] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.378] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29
	[0036.378] lstrlenW (lpString=".zip") returned 4
	[0036.378] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.378] lstrlenW (lpString=".rar") returned 4
	[0036.378] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.378] lstrlenW (lpString=".bz2") returned 4
	[0036.378] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.378] lstrlenW (lpString=".7z") returned 3
	[0036.378] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.379] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29
	[0036.379] lstrlenW (lpString=".dbf") returned 4
	[0036.379] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.379] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29
	[0036.379] lstrlenW (lpString=".1cd") returned 4
	[0036.379] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.379] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29
	[0036.379] lstrlenW (lpString=".jpg") returned 4
	[0036.379] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.379] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29
	[0036.379] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29
	[0036.379] lstrlenW (lpString=".doc") returned 4
	[0036.379] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.379] lstrlenW (lpString=".docx") returned 5
	[0036.379] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.379] lstrlenW (lpString=".pdf") returned 4
	[0036.379] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.379] lstrlenW (lpString=".xls") returned 4
	[0036.379] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.379] lstrlenW (lpString=".xlsx") returned 5
	[0036.379] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.379] lstrlenW (lpString=".ppt") returned 4
	[0036.379] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.379] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29
	[0036.379] lstrlenW (lpString=".zip") returned 4
	[0036.380] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.380] lstrlenW (lpString=".rar") returned 4
	[0036.380] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.380] lstrlenW (lpString=".bz2") returned 4
	[0036.380] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.380] lstrlenW (lpString=".7z") returned 3
	[0036.380] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.380] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29
	[0036.380] lstrlenW (lpString=".dbf") returned 4
	[0036.380] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.380] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29
	[0036.380] lstrlenW (lpString=".1cd") returned 4
	[0036.380] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.380] lstrlenW (lpString="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 29
	[0036.380] lstrlenW (lpString=".jpg") returned 4
	[0036.380] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.380] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0036.380] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0036.380] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0036.381] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=75344) returned 1
	[0036.381] CloseHandle (hObject=0x1b8) returned 1
	[0036.381] GetFileAttributesW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20
	[0036.381] GetFileAttributesW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.381] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0036.381] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29
	[0036.381] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29
	[0036.381] lstrlenW (lpString=".doc") returned 4
	[0036.381] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.381] lstrlenW (lpString=".docx") returned 5
	[0036.381] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.381] lstrlenW (lpString=".pdf") returned 4
	[0036.381] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.381] lstrlenW (lpString=".xls") returned 4
	[0036.381] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.381] lstrlenW (lpString=".xlsx") returned 5
	[0036.381] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.381] lstrlenW (lpString=".ppt") returned 4
	[0036.381] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.381] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29
	[0036.381] lstrlenW (lpString=".zip") returned 4
	[0036.381] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.381] lstrlenW (lpString=".rar") returned 4
	[0036.381] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.381] lstrlenW (lpString=".bz2") returned 4
	[0036.381] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.381] lstrlenW (lpString=".7z") returned 3
	[0036.382] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.382] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29
	[0036.382] lstrlenW (lpString=".dbf") returned 4
	[0036.382] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.382] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29
	[0036.382] lstrlenW (lpString=".1cd") returned 4
	[0036.382] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.382] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29
	[0036.382] lstrlenW (lpString=".jpg") returned 4
	[0036.382] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.382] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29
	[0036.382] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29
	[0036.382] lstrlenW (lpString=".doc") returned 4
	[0036.382] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.382] lstrlenW (lpString=".docx") returned 5
	[0036.382] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.382] lstrlenW (lpString=".pdf") returned 4
	[0036.382] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.382] lstrlenW (lpString=".xls") returned 4
	[0036.382] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.382] lstrlenW (lpString=".xlsx") returned 5
	[0036.382] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.382] lstrlenW (lpString=".ppt") returned 4
	[0036.382] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.382] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29
	[0036.382] lstrlenW (lpString=".zip") returned 4
	[0036.382] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.382] lstrlenW (lpString=".rar") returned 4
	[0036.382] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.382] lstrlenW (lpString=".bz2") returned 4
	[0036.382] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.382] lstrlenW (lpString=".7z") returned 3
	[0036.382] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.383] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29
	[0036.383] lstrlenW (lpString=".dbf") returned 4
	[0036.383] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.383] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29
	[0036.383] lstrlenW (lpString=".1cd") returned 4
	[0036.383] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.383] lstrlenW (lpString="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 29
	[0036.383] lstrlenW (lpString=".jpg") returned 4
	[0036.383] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.383] lstrcmpiW (lpString1=".exe", lpString2=".beets") returned 1
	[0036.383] lstrlenW (lpString="memtest.exe") returned 11
	[0036.383] CreateFileW (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0036.383] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=485760) returned 1
	[0036.383] CloseHandle (hObject=0x1b8) returned 1
	[0036.383] GetFileAttributesW (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20
	[0036.383] GetFileAttributesW (lpFileName="C:\\Boot\\memtest.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\memtest.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.384] CreateFileW (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0036.384] lstrlenW (lpString="C:\\Boot\\memtest.exe") returned 19
	[0036.384] lstrlenW (lpString="C:\\Boot\\memtest.exe") returned 19
	[0036.384] lstrlenW (lpString=".doc") returned 4
	[0036.384] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0036.384] lstrlenW (lpString=".docx") returned 5
	[0036.384] lstrcmpiW (lpString1=".docx", lpString2="t.exe") returned -1
	[0036.384] lstrlenW (lpString=".pdf") returned 4
	[0036.384] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0036.384] lstrlenW (lpString=".xls") returned 4
	[0036.384] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0036.384] lstrlenW (lpString=".xlsx") returned 5
	[0036.384] lstrcmpiW (lpString1=".xlsx", lpString2="t.exe") returned -1
	[0036.384] lstrlenW (lpString=".ppt") returned 4
	[0036.384] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0036.384] lstrlenW (lpString="C:\\Boot\\memtest.exe") returned 19
	[0036.384] lstrlenW (lpString=".zip") returned 4
	[0036.384] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0036.384] lstrlenW (lpString=".rar") returned 4
	[0036.384] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0036.384] lstrlenW (lpString=".bz2") returned 4
	[0036.384] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0036.384] lstrlenW (lpString=".7z") returned 3
	[0036.384] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0036.389] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0036.390] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0036.390] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0x0) returned 1
	[0036.390] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0036.390] ReadFile (in: hFile=0x1b8, lpBuffer=0x8920058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8920058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0036.727] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x56543e, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0036.727] ReadFile (in: hFile=0x1b8, lpBuffer=0x8960058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8960058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0036.898] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0036.898] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xfefcbb, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0036.898] ReadFile (in: hFile=0x1b8, lpBuffer=0x89a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x89a0058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0036.918] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.918] WriteFile (in: hFile=0x1b8, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x7edfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfcb0*=0xc0102, lpOverlapped=0x0) returned 1
	[0037.419] SetEndOfFile (hFile=0x1b8) returned 1
	[0037.420] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d4d118
	[0037.423] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0037.423] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d4d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d4d118*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0037.424] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x56543e, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0037.424] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d4d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d4d118*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0037.424] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xfefcbb, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0037.424] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d4d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d4d118*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0037.426] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d4d118 | out: hHeap=0x5350000) returned 1
	[0037.426] CloseHandle (hObject=0x1b8) returned 1
	[0040.106] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0040.106] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0040.106] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0040.106] lstrlenW (lpString=".doc") returned 4
	[0040.106] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0040.106] lstrlenW (lpString=".docx") returned 5
	[0040.106] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0040.106] lstrlenW (lpString=".pdf") returned 4
	[0040.106] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0040.106] lstrlenW (lpString=".xls") returned 4
	[0040.106] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0040.107] lstrlenW (lpString=".xlsx") returned 5
	[0040.107] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0040.107] lstrlenW (lpString=".ppt") returned 4
	[0040.107] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0040.107] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0040.107] lstrlenW (lpString=".zip") returned 4
	[0040.107] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0040.107] lstrlenW (lpString=".rar") returned 4
	[0040.107] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0040.107] lstrlenW (lpString=".bz2") returned 4
	[0040.107] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0040.107] lstrlenW (lpString=".7z") returned 3
	[0040.107] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0040.107] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0040.107] lstrlenW (lpString=".dbf") returned 4
	[0040.107] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0040.107] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0040.107] lstrlenW (lpString=".1cd") returned 4
	[0040.107] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0040.107] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0040.107] lstrlenW (lpString=".jpg") returned 4
	[0040.107] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0040.107] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0040.107] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0040.107] lstrlenW (lpString=".doc") returned 4
	[0040.107] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0040.107] lstrlenW (lpString=".docx") returned 5
	[0040.107] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0040.107] lstrlenW (lpString=".pdf") returned 4
	[0040.107] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0040.107] lstrlenW (lpString=".xls") returned 4
	[0040.107] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0040.108] lstrlenW (lpString=".xlsx") returned 5
	[0040.108] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0040.108] lstrlenW (lpString=".ppt") returned 4
	[0040.108] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0040.108] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0040.108] lstrlenW (lpString=".zip") returned 4
	[0040.108] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0040.108] lstrlenW (lpString=".rar") returned 4
	[0040.108] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0040.108] lstrlenW (lpString=".bz2") returned 4
	[0040.108] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0040.108] lstrlenW (lpString=".7z") returned 3
	[0040.108] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0040.108] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0040.108] lstrlenW (lpString=".dbf") returned 4
	[0040.108] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0040.108] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0040.108] lstrlenW (lpString=".1cd") returned 4
	[0040.108] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0040.108] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 74
	[0040.108] lstrlenW (lpString=".jpg") returned 4
	[0040.108] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0040.108] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0040.108] lstrlenW (lpString="OutlookMUI.msi") returned 14
	[0040.108] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0040.109] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=2865664) returned 1
	[0040.109] CloseHandle (hObject=0x1b8) returned 1
	[0040.109] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi")) returned 0x2020
	[0040.109] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0040.109] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0040.109] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0040.109] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0x0) returned 1
	[0040.110] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0040.110] ReadFile (in: hFile=0x1b8, lpBuffer=0x8920058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8920058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0040.305] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xe9355, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0040.305] ReadFile (in: hFile=0x1b8, lpBuffer=0x8960058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8960058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0040.315] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0040.315] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x27ba00, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0040.315] ReadFile (in: hFile=0x1b8, lpBuffer=0x89a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x89a0058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0040.330] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0040.330] WriteFile (in: hFile=0x1b8, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x7edfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfcb0*=0xc0108, lpOverlapped=0x0) returned 1
	[0040.884] SetEndOfFile (hFile=0x1b8) returned 1
	[0040.884] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d3d110
	[0041.108] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0041.108] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0041.110] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xe9355, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0041.110] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0041.115] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x27ba00, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0041.115] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0041.117] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d3d110 | out: hHeap=0x5350000) returned 1
	[0041.117] CloseHandle (hObject=0x1b8) returned 1
	[0041.860] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0041.860] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77
	[0041.860] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77
	[0041.860] lstrlenW (lpString=".doc") returned 4
	[0041.860] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0041.860] lstrlenW (lpString=".docx") returned 5
	[0041.860] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0041.860] lstrlenW (lpString=".pdf") returned 4
	[0041.860] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0041.860] lstrlenW (lpString=".xls") returned 4
	[0041.860] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0041.860] lstrlenW (lpString=".xlsx") returned 5
	[0041.860] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0041.860] lstrlenW (lpString=".ppt") returned 4
	[0041.860] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0041.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77
	[0041.861] lstrlenW (lpString=".zip") returned 4
	[0041.861] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0041.861] lstrlenW (lpString=".rar") returned 4
	[0041.861] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0041.861] lstrlenW (lpString=".bz2") returned 4
	[0041.861] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0041.861] lstrlenW (lpString=".7z") returned 3
	[0041.861] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0041.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77
	[0041.861] lstrlenW (lpString=".dbf") returned 4
	[0041.861] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0041.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77
	[0041.861] lstrlenW (lpString=".1cd") returned 4
	[0041.861] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0041.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77
	[0041.861] lstrlenW (lpString=".jpg") returned 4
	[0041.861] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0041.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77
	[0041.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77
	[0041.861] lstrlenW (lpString=".doc") returned 4
	[0041.861] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0041.861] lstrlenW (lpString=".docx") returned 5
	[0041.861] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0041.861] lstrlenW (lpString=".pdf") returned 4
	[0041.861] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0041.861] lstrlenW (lpString=".xls") returned 4
	[0041.861] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0041.861] lstrlenW (lpString=".xlsx") returned 5
	[0041.861] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0041.861] lstrlenW (lpString=".ppt") returned 4
	[0041.861] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0041.861] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77
	[0041.861] lstrlenW (lpString=".zip") returned 4
	[0041.862] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0041.862] lstrlenW (lpString=".rar") returned 4
	[0041.862] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0041.862] lstrlenW (lpString=".bz2") returned 4
	[0041.862] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0041.862] lstrlenW (lpString=".7z") returned 3
	[0041.862] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0041.862] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77
	[0041.862] lstrlenW (lpString=".dbf") returned 4
	[0041.862] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0041.862] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77
	[0041.862] lstrlenW (lpString=".1cd") returned 4
	[0041.862] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0041.862] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 77
	[0041.862] lstrlenW (lpString=".jpg") returned 4
	[0041.862] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0041.862] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0041.862] lstrlenW (lpString="Proof.cab") returned 9
	[0041.862] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0041.862] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=11482605) returned 1
	[0041.862] CloseHandle (hObject=0x1b8) returned 1
	[0041.863] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab")) returned 0x2020
	[0041.863] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.863] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0042.511] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0042.511] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0x0) returned 1
	[0042.511] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0042.511] ReadFile (in: hFile=0x1b8, lpBuffer=0x8920058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8920058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0042.514] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x3a674f, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0042.514] ReadFile (in: hFile=0x1b8, lpBuffer=0x8960058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8960058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0042.518] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0042.519] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xab35ed, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0042.519] ReadFile (in: hFile=0x1b8, lpBuffer=0x89a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x89a0058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0042.533] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.533] WriteFile (in: hFile=0x1b8, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x7edfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfcb0*=0xc00fe, lpOverlapped=0x0) returned 1
	[0042.773] SetEndOfFile (hFile=0x1b8) returned 1
	[0042.774] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d6d110
	[0042.778] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0042.778] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0042.779] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x3a674f, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0042.779] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0042.781] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xab35ed, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0042.781] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0042.783] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d6d110 | out: hHeap=0x5350000) returned 1
	[0042.783] CloseHandle (hObject=0x1b8) returned 1
	[0046.180] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0046.180] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0046.180] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0046.180] lstrlenW (lpString=".doc") returned 4
	[0046.180] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0046.180] lstrlenW (lpString=".docx") returned 5
	[0046.180] lstrcmpiW (lpString1=".docx", lpString2="f.cab") returned -1
	[0046.180] lstrlenW (lpString=".pdf") returned 4
	[0046.180] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0046.180] lstrlenW (lpString=".xls") returned 4
	[0046.180] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0046.180] lstrlenW (lpString=".xlsx") returned 5
	[0046.180] lstrcmpiW (lpString1=".xlsx", lpString2="f.cab") returned -1
	[0046.180] lstrlenW (lpString=".ppt") returned 4
	[0046.180] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0046.180] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0046.180] lstrlenW (lpString=".zip") returned 4
	[0046.180] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0046.180] lstrlenW (lpString=".rar") returned 4
	[0046.180] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0046.180] lstrlenW (lpString=".bz2") returned 4
	[0046.180] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0046.181] lstrlenW (lpString=".7z") returned 3
	[0046.181] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0046.181] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0046.181] lstrlenW (lpString=".dbf") returned 4
	[0046.181] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0046.181] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0046.181] lstrlenW (lpString=".1cd") returned 4
	[0046.181] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0046.181] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0046.181] lstrlenW (lpString=".jpg") returned 4
	[0046.181] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0046.181] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0046.181] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0046.181] lstrlenW (lpString=".doc") returned 4
	[0046.181] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0046.181] lstrlenW (lpString=".docx") returned 5
	[0046.181] lstrcmpiW (lpString1=".docx", lpString2="f.cab") returned -1
	[0046.181] lstrlenW (lpString=".pdf") returned 4
	[0046.181] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0046.181] lstrlenW (lpString=".xls") returned 4
	[0046.181] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0046.181] lstrlenW (lpString=".xlsx") returned 5
	[0046.181] lstrcmpiW (lpString1=".xlsx", lpString2="f.cab") returned -1
	[0046.181] lstrlenW (lpString=".ppt") returned 4
	[0046.181] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0046.181] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0046.181] lstrlenW (lpString=".zip") returned 4
	[0046.181] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0046.181] lstrlenW (lpString=".rar") returned 4
	[0046.181] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0046.181] lstrlenW (lpString=".bz2") returned 4
	[0046.181] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0046.181] lstrlenW (lpString=".7z") returned 3
	[0046.182] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0046.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0046.182] lstrlenW (lpString=".dbf") returned 4
	[0046.182] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0046.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0046.182] lstrlenW (lpString=".1cd") returned 4
	[0046.182] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0046.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 81
	[0046.182] lstrlenW (lpString=".jpg") returned 4
	[0046.182] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0046.182] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0046.182] lstrlenW (lpString="OWOW32LR.cab") returned 12
	[0046.182] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0046.182] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=2928955) returned 1
	[0046.182] CloseHandle (hObject=0x1b8) returned 1
	[0046.182] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab")) returned 0x2020
	[0046.183] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.183] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0046.183] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0046.183] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0x0) returned 1
	[0046.183] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0046.183] ReadFile (in: hFile=0x1b8, lpBuffer=0x8920058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8920058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0046.264] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xee5be, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0046.264] ReadFile (in: hFile=0x1b8, lpBuffer=0x8960058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8960058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0046.315] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0046.315] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x28b13b, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0046.315] ReadFile (in: hFile=0x1b8, lpBuffer=0x89a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x89a0058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0046.394] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.394] WriteFile (in: hFile=0x1b8, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x7edfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0046.630] SetEndOfFile (hFile=0x1b8) returned 1
	[0046.630] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8dad118
	[0046.634] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0046.634] WriteFile (in: hFile=0x1b8, lpBuffer=0x8dad118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8dad118*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0046.635] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xee5be, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0046.636] WriteFile (in: hFile=0x1b8, lpBuffer=0x8dad118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8dad118*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0046.641] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x28b13b, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0046.641] WriteFile (in: hFile=0x1b8, lpBuffer=0x8dad118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8dad118*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0046.643] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8dad118 | out: hHeap=0x5350000) returned 1
	[0046.643] CloseHandle (hObject=0x1b8) returned 1
	[0047.340] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0047.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75
	[0047.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75
	[0047.341] lstrlenW (lpString=".doc") returned 4
	[0047.341] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0047.341] lstrlenW (lpString=".docx") returned 5
	[0047.341] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0047.341] lstrlenW (lpString=".pdf") returned 4
	[0047.341] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0047.341] lstrlenW (lpString=".xls") returned 4
	[0047.341] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0047.341] lstrlenW (lpString=".xlsx") returned 5
	[0047.341] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0047.341] lstrlenW (lpString=".ppt") returned 4
	[0047.341] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0047.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75
	[0047.341] lstrlenW (lpString=".zip") returned 4
	[0047.341] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0047.342] lstrlenW (lpString=".rar") returned 4
	[0047.342] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0047.342] lstrlenW (lpString=".bz2") returned 4
	[0047.342] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0047.342] lstrlenW (lpString=".7z") returned 3
	[0047.342] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0047.342] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75
	[0047.342] lstrlenW (lpString=".dbf") returned 4
	[0047.342] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0047.342] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75
	[0047.342] lstrlenW (lpString=".1cd") returned 4
	[0047.342] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0047.342] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75
	[0047.342] lstrlenW (lpString=".jpg") returned 4
	[0047.342] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0047.342] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75
	[0047.342] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75
	[0047.342] lstrlenW (lpString=".doc") returned 4
	[0047.342] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0047.342] lstrlenW (lpString=".docx") returned 5
	[0047.342] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0047.342] lstrlenW (lpString=".pdf") returned 4
	[0047.342] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0047.342] lstrlenW (lpString=".xls") returned 4
	[0047.342] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0047.342] lstrlenW (lpString=".xlsx") returned 5
	[0047.343] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0047.343] lstrlenW (lpString=".ppt") returned 4
	[0047.343] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0047.343] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75
	[0047.343] lstrlenW (lpString=".zip") returned 4
	[0047.343] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0047.343] lstrlenW (lpString=".rar") returned 4
	[0047.343] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0047.343] lstrlenW (lpString=".bz2") returned 4
	[0047.343] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0047.343] lstrlenW (lpString=".7z") returned 3
	[0047.343] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0047.343] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75
	[0047.343] lstrlenW (lpString=".dbf") returned 4
	[0047.343] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0047.343] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75
	[0047.343] lstrlenW (lpString=".1cd") returned 4
	[0047.343] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0047.343] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 75
	[0047.343] lstrlenW (lpString=".jpg") returned 4
	[0047.343] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0047.343] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0047.344] lstrlenW (lpString="VisioMUI.msi") returned 12
	[0047.344] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0047.344] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=2797568) returned 1
	[0047.344] CloseHandle (hObject=0x1b8) returned 1
	[0047.344] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi")) returned 0x2020
	[0047.344] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.344] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0047.345] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0047.345] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0x0) returned 1
	[0047.345] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.345] ReadFile (in: hFile=0x1b8, lpBuffer=0x8920058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8920058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.349] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xe3aaa, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.349] ReadFile (in: hFile=0x1b8, lpBuffer=0x8960058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8960058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.362] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0047.363] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x26b000, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.363] ReadFile (in: hFile=0x1b8, lpBuffer=0x89a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x89a0058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.379] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.379] WriteFile (in: hFile=0x1b8, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x7edfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0047.562] SetEndOfFile (hFile=0x1b8) returned 1
	[0047.562] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8cb50d8
	[0047.562] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.562] WriteFile (in: hFile=0x1b8, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.564] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xe3aaa, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.564] WriteFile (in: hFile=0x1b8, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.569] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x26b000, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.569] WriteFile (in: hFile=0x1b8, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.571] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb50d8 | out: hHeap=0x5350000) returned 1
	[0047.571] CloseHandle (hObject=0x1b8) returned 1
	[0047.571] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0047.572] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75
	[0047.572] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75
	[0047.572] lstrlenW (lpString=".doc") returned 4
	[0047.572] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0047.572] lstrlenW (lpString=".docx") returned 5
	[0047.572] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0047.572] lstrlenW (lpString=".pdf") returned 4
	[0047.572] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0047.572] lstrlenW (lpString=".xls") returned 4
	[0047.572] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0047.572] lstrlenW (lpString=".xlsx") returned 5
	[0047.572] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0047.572] lstrlenW (lpString=".ppt") returned 4
	[0047.572] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0047.572] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75
	[0047.572] lstrlenW (lpString=".zip") returned 4
	[0047.572] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0047.572] lstrlenW (lpString=".rar") returned 4
	[0047.572] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0047.572] lstrlenW (lpString=".bz2") returned 4
	[0047.572] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0047.572] lstrlenW (lpString=".7z") returned 3
	[0047.572] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0047.572] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75
	[0047.572] lstrlenW (lpString=".dbf") returned 4
	[0047.573] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0047.573] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75
	[0047.573] lstrlenW (lpString=".1cd") returned 4
	[0047.573] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0047.573] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75
	[0047.573] lstrlenW (lpString=".jpg") returned 4
	[0047.573] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0047.573] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75
	[0047.573] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75
	[0047.573] lstrlenW (lpString=".doc") returned 4
	[0047.573] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0047.573] lstrlenW (lpString=".docx") returned 5
	[0047.573] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0047.573] lstrlenW (lpString=".pdf") returned 4
	[0047.573] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0047.573] lstrlenW (lpString=".xls") returned 4
	[0047.573] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0047.573] lstrlenW (lpString=".xlsx") returned 5
	[0047.573] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0047.573] lstrlenW (lpString=".ppt") returned 4
	[0047.573] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0047.573] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75
	[0047.573] lstrlenW (lpString=".zip") returned 4
	[0047.573] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0047.573] lstrlenW (lpString=".rar") returned 4
	[0047.573] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0047.573] lstrlenW (lpString=".bz2") returned 4
	[0047.573] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0047.573] lstrlenW (lpString=".7z") returned 3
	[0047.573] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0047.573] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75
	[0047.573] lstrlenW (lpString=".dbf") returned 4
	[0047.574] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0047.574] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75
	[0047.574] lstrlenW (lpString=".1cd") returned 4
	[0047.574] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0047.574] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 75
	[0047.574] lstrlenW (lpString=".jpg") returned 4
	[0047.574] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0047.574] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0047.574] lstrlenW (lpString="ProjLR.cab") returned 10
	[0047.574] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0047.734] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=8265165) returned 1
	[0047.734] CloseHandle (hObject=0x1b0) returned 1
	[0047.734] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab")) returned 0x2020
	[0047.734] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.734] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0047.868] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0047.868] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0x0) returned 1
	[0047.868] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.868] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8920058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.900] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x2a09ef, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.900] ReadFile (in: hFile=0x1b0, lpBuffer=0x8960058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8960058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.917] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0047.917] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x7a1dcd, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.917] ReadFile (in: hFile=0x1b0, lpBuffer=0x89a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x89a0058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.945] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.945] WriteFile (in: hFile=0x1b0, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x7edfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfcb0*=0xc0100, lpOverlapped=0x0) returned 1
	[0048.226] SetEndOfFile (hFile=0x1b0) returned 1
	[0048.226] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8cb50d8
	[0048.230] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0048.230] WriteFile (in: hFile=0x1b0, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0048.232] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x2a09ef, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0048.232] WriteFile (in: hFile=0x1b0, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0048.234] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x7a1dcd, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0048.234] WriteFile (in: hFile=0x1b0, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0048.236] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb50d8 | out: hHeap=0x5350000) returned 1
	[0048.236] CloseHandle (hObject=0x1b0) returned 1
	[0048.236] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0048.236] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73
	[0048.236] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73
	[0048.237] lstrlenW (lpString=".doc") returned 4
	[0048.237] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0048.237] lstrlenW (lpString=".docx") returned 5
	[0048.237] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0048.237] lstrlenW (lpString=".pdf") returned 4
	[0048.237] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0048.237] lstrlenW (lpString=".xls") returned 4
	[0048.237] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0048.237] lstrlenW (lpString=".xlsx") returned 5
	[0048.237] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0048.237] lstrlenW (lpString=".ppt") returned 4
	[0048.237] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0048.237] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73
	[0048.237] lstrlenW (lpString=".zip") returned 4
	[0048.237] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0048.237] lstrlenW (lpString=".rar") returned 4
	[0048.237] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0048.237] lstrlenW (lpString=".bz2") returned 4
	[0048.237] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0048.237] lstrlenW (lpString=".7z") returned 3
	[0048.237] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0048.237] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73
	[0048.237] lstrlenW (lpString=".dbf") returned 4
	[0048.237] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0048.237] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73
	[0048.237] lstrlenW (lpString=".1cd") returned 4
	[0048.237] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0048.237] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73
	[0048.237] lstrlenW (lpString=".jpg") returned 4
	[0048.237] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0048.237] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73
	[0048.237] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73
	[0048.238] lstrlenW (lpString=".doc") returned 4
	[0048.238] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0048.238] lstrlenW (lpString=".docx") returned 5
	[0048.238] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0048.238] lstrlenW (lpString=".pdf") returned 4
	[0048.238] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0048.238] lstrlenW (lpString=".xls") returned 4
	[0048.238] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0048.238] lstrlenW (lpString=".xlsx") returned 5
	[0048.238] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0048.238] lstrlenW (lpString=".ppt") returned 4
	[0048.238] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0048.238] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73
	[0048.238] lstrlenW (lpString=".zip") returned 4
	[0048.238] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0048.238] lstrlenW (lpString=".rar") returned 4
	[0048.238] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0048.238] lstrlenW (lpString=".bz2") returned 4
	[0048.238] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0048.238] lstrlenW (lpString=".7z") returned 3
	[0048.238] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0048.238] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73
	[0048.238] lstrlenW (lpString=".dbf") returned 4
	[0048.238] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0048.238] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73
	[0048.238] lstrlenW (lpString=".1cd") returned 4
	[0048.238] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0048.238] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 73
	[0048.238] lstrlenW (lpString=".jpg") returned 4
	[0048.238] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0048.239] lstrcmpiW (lpString1=".exe", lpString2=".beets") returned 1
	[0048.239] lstrlenW (lpString="dwtrig20.exe") returned 12
	[0048.239] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0048.239] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=519584) returned 1
	[0048.239] CloseHandle (hObject=0x1b0) returned 1
	[0048.239] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe")) returned 0x2020
	[0048.239] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.239] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0048.239] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.239] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.239] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0048.465] GetLastError () returned 0x0
	[0048.465] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x7eda0, lpOverlapped=0x0) returned 1
	[0049.024] WriteFile (in: hFile=0x218, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0x7edb0, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0x7edb0, lpOverlapped=0x0) returned 1
	[0049.033] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.033] WriteFile (in: hFile=0x218, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0049.033] SetEndOfFile (hFile=0x218) returned 1
	[0049.033] CloseHandle (hObject=0x218) returned 1
	[0049.034] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.034] SetEndOfFile (hFile=0x1b0) returned 1
	[0049.038] CloseHandle (hObject=0x1b0) returned 1
	[0049.038] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0049.038] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe")) returned 1
	[0049.038] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75
	[0049.039] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75
	[0049.039] lstrlenW (lpString=".doc") returned 4
	[0049.039] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0049.039] lstrlenW (lpString=".docx") returned 5
	[0049.039] lstrcmpiW (lpString1=".docx", lpString2="0.exe") returned -1
	[0049.039] lstrlenW (lpString=".pdf") returned 4
	[0049.039] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0049.039] lstrlenW (lpString=".xls") returned 4
	[0049.039] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0049.039] lstrlenW (lpString=".xlsx") returned 5
	[0049.039] lstrcmpiW (lpString1=".xlsx", lpString2="0.exe") returned -1
	[0049.039] lstrlenW (lpString=".ppt") returned 4
	[0049.039] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0049.039] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75
	[0049.039] lstrlenW (lpString=".zip") returned 4
	[0049.039] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0049.039] lstrlenW (lpString=".rar") returned 4
	[0049.039] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0049.039] lstrlenW (lpString=".bz2") returned 4
	[0049.039] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0049.039] lstrlenW (lpString=".7z") returned 3
	[0049.039] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0049.039] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75
	[0049.039] lstrlenW (lpString=".dbf") returned 4
	[0049.039] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0049.039] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75
	[0049.039] lstrlenW (lpString=".1cd") returned 4
	[0049.039] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0049.039] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75
	[0049.039] lstrlenW (lpString=".jpg") returned 4
	[0049.039] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0049.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75
	[0049.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75
	[0049.040] lstrlenW (lpString=".doc") returned 4
	[0049.040] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0049.040] lstrlenW (lpString=".docx") returned 5
	[0049.040] lstrcmpiW (lpString1=".docx", lpString2="0.exe") returned -1
	[0049.040] lstrlenW (lpString=".pdf") returned 4
	[0049.040] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0049.040] lstrlenW (lpString=".xls") returned 4
	[0049.040] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0049.040] lstrlenW (lpString=".xlsx") returned 5
	[0049.040] lstrcmpiW (lpString1=".xlsx", lpString2="0.exe") returned -1
	[0049.040] lstrlenW (lpString=".ppt") returned 4
	[0049.040] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0049.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75
	[0049.040] lstrlenW (lpString=".zip") returned 4
	[0049.040] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0049.040] lstrlenW (lpString=".rar") returned 4
	[0049.040] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0049.040] lstrlenW (lpString=".bz2") returned 4
	[0049.040] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0049.040] lstrlenW (lpString=".7z") returned 3
	[0049.040] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0049.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75
	[0049.040] lstrlenW (lpString=".dbf") returned 4
	[0049.040] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0049.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75
	[0049.040] lstrlenW (lpString=".1cd") returned 4
	[0049.040] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0049.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 75
	[0049.040] lstrlenW (lpString=".jpg") returned 4
	[0049.040] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0049.041] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0049.041] lstrlenW (lpString="OfficeMUI.msi") returned 13
	[0049.041] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0049.041] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=3702272) returned 1
	[0049.041] CloseHandle (hObject=0x1b0) returned 1
	[0049.041] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi")) returned 0x2020
	[0049.041] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.041] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0049.042] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0049.042] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0x0) returned 1
	[0049.042] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0049.042] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8920058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0049.391] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x12d4aa, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0049.391] ReadFile (in: hFile=0x1b0, lpBuffer=0x8960058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8960058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.191] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0050.191] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x347e00, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.191] ReadFile (in: hFile=0x1b0, lpBuffer=0x89a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x89a0058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.287] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.287] WriteFile (in: hFile=0x1b0, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xc0106, lpNumberOfBytesWritten=0x7edfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfcb0*=0xc0106, lpOverlapped=0x0) returned 1
	[0050.627] SetEndOfFile (hFile=0x1b0) returned 1
	[0050.627] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8dad130
	[0050.632] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.632] WriteFile (in: hFile=0x1b0, lpBuffer=0x8dad130*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8dad130*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.633] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x12d4aa, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.633] WriteFile (in: hFile=0x1b0, lpBuffer=0x8dad130*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8dad130*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.637] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x347e00, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.637] WriteFile (in: hFile=0x1b0, lpBuffer=0x8dad130*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8dad130*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.639] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8dad130 | out: hHeap=0x5350000) returned 1
	[0050.639] CloseHandle (hObject=0x1b0) returned 1
	[0050.640] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0050.640] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76
	[0050.640] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76
	[0050.640] lstrlenW (lpString=".doc") returned 4
	[0050.640] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0050.640] lstrlenW (lpString=".docx") returned 5
	[0050.640] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0050.640] lstrlenW (lpString=".pdf") returned 4
	[0050.640] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0050.640] lstrlenW (lpString=".xls") returned 4
	[0050.640] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0050.640] lstrlenW (lpString=".xlsx") returned 5
	[0050.640] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0050.640] lstrlenW (lpString=".ppt") returned 4
	[0050.640] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0050.640] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76
	[0050.640] lstrlenW (lpString=".zip") returned 4
	[0050.640] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0050.640] lstrlenW (lpString=".rar") returned 4
	[0050.640] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0050.640] lstrlenW (lpString=".bz2") returned 4
	[0050.640] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0050.640] lstrlenW (lpString=".7z") returned 3
	[0050.640] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0050.640] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76
	[0050.640] lstrlenW (lpString=".dbf") returned 4
	[0050.641] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0050.641] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76
	[0050.641] lstrlenW (lpString=".1cd") returned 4
	[0050.641] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0050.641] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76
	[0050.641] lstrlenW (lpString=".jpg") returned 4
	[0050.641] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0050.641] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76
	[0050.641] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76
	[0050.641] lstrlenW (lpString=".doc") returned 4
	[0050.641] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0050.641] lstrlenW (lpString=".docx") returned 5
	[0050.641] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0050.641] lstrlenW (lpString=".pdf") returned 4
	[0050.641] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0050.641] lstrlenW (lpString=".xls") returned 4
	[0050.641] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0050.641] lstrlenW (lpString=".xlsx") returned 5
	[0050.641] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0050.641] lstrlenW (lpString=".ppt") returned 4
	[0050.641] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0050.641] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76
	[0050.641] lstrlenW (lpString=".zip") returned 4
	[0050.641] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0050.641] lstrlenW (lpString=".rar") returned 4
	[0050.641] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0050.641] lstrlenW (lpString=".bz2") returned 4
	[0050.641] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0050.641] lstrlenW (lpString=".7z") returned 3
	[0050.641] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0050.641] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76
	[0050.641] lstrlenW (lpString=".dbf") returned 4
	[0050.641] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0050.642] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76
	[0050.642] lstrlenW (lpString=".1cd") returned 4
	[0050.642] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0050.642] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 76
	[0050.642] lstrlenW (lpString=".jpg") returned 4
	[0050.642] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0050.642] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0050.642] lstrlenW (lpString="PidGenX.dll") returned 11
	[0050.642] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0050.642] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=1463568) returned 1
	[0050.642] CloseHandle (hObject=0x1b0) returned 1
	[0050.642] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 0x2020
	[0050.642] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.642] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0050.642] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.643] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.643] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0050.643] GetLastError () returned 0x0
	[0050.643] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0xffff0, lpOverlapped=0x0) returned 1
	[0050.734] WriteFile (in: hFile=0x1dc, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xffff0, lpOverlapped=0x0) returned 1
	[0050.750] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x65520, lpOverlapped=0x0) returned 1
	[0050.998] WriteFile (in: hFile=0x1dc, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0x65530, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0x65530, lpOverlapped=0x0) returned 1
	[0051.007] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.007] WriteFile (in: hFile=0x1dc, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xea, lpOverlapped=0x0) returned 1
	[0051.008] SetEndOfFile (hFile=0x1dc) returned 1
	[0051.008] CloseHandle (hObject=0x1dc) returned 1
	[0051.008] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.008] SetEndOfFile (hFile=0x1b0) returned 1
	[0051.012] CloseHandle (hObject=0x1b0) returned 1
	[0051.012] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0051.012] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 1
	[0051.012] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0051.012] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0051.012] lstrlenW (lpString=".doc") returned 4
	[0051.012] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0051.012] lstrlenW (lpString=".docx") returned 5
	[0051.012] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1
	[0051.012] lstrlenW (lpString=".pdf") returned 4
	[0051.013] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0051.013] lstrlenW (lpString=".xls") returned 4
	[0051.013] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0051.013] lstrlenW (lpString=".xlsx") returned 5
	[0051.013] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1
	[0051.013] lstrlenW (lpString=".ppt") returned 4
	[0051.013] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0051.013] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0051.013] lstrlenW (lpString=".zip") returned 4
	[0051.013] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0051.013] lstrlenW (lpString=".rar") returned 4
	[0051.013] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0051.013] lstrlenW (lpString=".bz2") returned 4
	[0051.013] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0051.013] lstrlenW (lpString=".7z") returned 3
	[0051.013] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0051.013] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0051.013] lstrlenW (lpString=".dbf") returned 4
	[0051.013] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0051.013] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0051.013] lstrlenW (lpString=".1cd") returned 4
	[0051.013] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0051.013] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0051.013] lstrlenW (lpString=".jpg") returned 4
	[0051.013] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0051.013] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0051.013] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0051.013] lstrlenW (lpString=".doc") returned 4
	[0051.013] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0051.013] lstrlenW (lpString=".docx") returned 5
	[0051.014] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1
	[0051.014] lstrlenW (lpString=".pdf") returned 4
	[0051.014] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0051.014] lstrlenW (lpString=".xls") returned 4
	[0051.014] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0051.014] lstrlenW (lpString=".xlsx") returned 5
	[0051.014] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1
	[0051.014] lstrlenW (lpString=".ppt") returned 4
	[0051.014] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0051.014] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0051.014] lstrlenW (lpString=".zip") returned 4
	[0051.014] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0051.014] lstrlenW (lpString=".rar") returned 4
	[0051.014] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0051.014] lstrlenW (lpString=".bz2") returned 4
	[0051.014] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0051.014] lstrlenW (lpString=".7z") returned 3
	[0051.014] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0051.014] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0051.014] lstrlenW (lpString=".dbf") returned 4
	[0051.014] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0051.014] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0051.014] lstrlenW (lpString=".1cd") returned 4
	[0051.014] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0051.014] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0051.014] lstrlenW (lpString=".jpg") returned 4
	[0051.014] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0051.014] lstrcmpiW (lpString1=".exe", lpString2=".beets") returned 1
	[0051.015] lstrlenW (lpString="setup.exe") returned 9
	[0051.015] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0051.015] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=1377656) returned 1
	[0051.015] CloseHandle (hObject=0x1b0) returned 1
	[0051.015] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 0x2020
	[0051.015] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.015] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0051.015] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.015] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.015] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0051.016] GetLastError () returned 0x0
	[0051.016] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0xffff0, lpOverlapped=0x0) returned 1
	[0051.100] WriteFile (in: hFile=0x1dc, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xffff0, lpOverlapped=0x0) returned 1
	[0051.120] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x50588, lpOverlapped=0x0) returned 1
	[0051.232] WriteFile (in: hFile=0x1dc, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0x50590, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0x50590, lpOverlapped=0x0) returned 1
	[0051.386] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.386] WriteFile (in: hFile=0x1dc, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0051.386] SetEndOfFile (hFile=0x1dc) returned 1
	[0051.386] CloseHandle (hObject=0x1dc) returned 1
	[0051.387] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.387] SetEndOfFile (hFile=0x1b0) returned 1
	[0051.390] CloseHandle (hObject=0x1b0) returned 1
	[0051.390] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0051.390] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 1
	[0051.391] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0051.391] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0051.391] lstrlenW (lpString=".doc") returned 4
	[0051.391] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0051.391] lstrlenW (lpString=".docx") returned 5
	[0051.391] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0051.391] lstrlenW (lpString=".pdf") returned 4
	[0051.391] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0051.391] lstrlenW (lpString=".xls") returned 4
	[0051.391] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0051.391] lstrlenW (lpString=".xlsx") returned 5
	[0051.391] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0051.391] lstrlenW (lpString=".ppt") returned 4
	[0051.391] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0051.391] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0051.391] lstrlenW (lpString=".zip") returned 4
	[0051.391] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0051.391] lstrlenW (lpString=".rar") returned 4
	[0051.391] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0051.391] lstrlenW (lpString=".bz2") returned 4
	[0051.391] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0051.391] lstrlenW (lpString=".7z") returned 3
	[0051.391] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0051.391] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0051.391] lstrlenW (lpString=".dbf") returned 4
	[0051.391] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0051.391] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0051.391] lstrlenW (lpString=".1cd") returned 4
	[0051.391] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0051.391] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0051.391] lstrlenW (lpString=".jpg") returned 4
	[0051.392] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0051.392] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0051.392] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0051.392] lstrlenW (lpString=".doc") returned 4
	[0051.392] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0051.392] lstrlenW (lpString=".docx") returned 5
	[0051.392] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0051.392] lstrlenW (lpString=".pdf") returned 4
	[0051.392] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0051.392] lstrlenW (lpString=".xls") returned 4
	[0051.392] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0051.392] lstrlenW (lpString=".xlsx") returned 5
	[0051.392] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0051.392] lstrlenW (lpString=".ppt") returned 4
	[0051.392] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0051.392] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0051.392] lstrlenW (lpString=".zip") returned 4
	[0051.392] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0051.392] lstrlenW (lpString=".rar") returned 4
	[0051.392] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0051.392] lstrlenW (lpString=".bz2") returned 4
	[0051.392] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0051.392] lstrlenW (lpString=".7z") returned 3
	[0051.392] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0051.392] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0051.392] lstrlenW (lpString=".dbf") returned 4
	[0051.392] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0051.392] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0051.392] lstrlenW (lpString=".1cd") returned 4
	[0051.392] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0051.392] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0051.392] lstrlenW (lpString=".jpg") returned 4
	[0051.392] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0051.393] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0051.393] lstrlenW (lpString="osetup.dll") returned 10
	[0051.393] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0051.393] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=7378792) returned 1
	[0051.393] CloseHandle (hObject=0x1b0) returned 1
	[0051.393] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll")) returned 0x2020
	[0051.393] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.393] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0051.394] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0051.394] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0x0) returned 1
	[0051.394] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.394] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8920058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.423] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.423] ReadFile (in: hFile=0x1b0, lpBuffer=0x8960058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8960058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.440] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0051.441] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.441] ReadFile (in: hFile=0x1b0, lpBuffer=0x89a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x89a0058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.620] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.620] WriteFile (in: hFile=0x1b0, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x7edfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfcb0*=0xc0100, lpOverlapped=0x0) returned 1
	[0051.658] SetEndOfFile (hFile=0x1b0) returned 1
	[0051.658] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d1d100
	[0051.683] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.683] WriteFile (in: hFile=0x1b0, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.684] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.684] WriteFile (in: hFile=0x1b0, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.686] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.686] WriteFile (in: hFile=0x1b0, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.688] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d1d100 | out: hHeap=0x5350000) returned 1
	[0051.688] CloseHandle (hObject=0x1b0) returned 1
	[0051.688] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0051.688] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0051.688] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0051.688] lstrlenW (lpString=".doc") returned 4
	[0051.688] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0051.688] lstrlenW (lpString=".docx") returned 5
	[0051.688] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0051.688] lstrlenW (lpString=".pdf") returned 4
	[0051.688] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0051.689] lstrlenW (lpString=".xls") returned 4
	[0051.689] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0051.689] lstrlenW (lpString=".xlsx") returned 5
	[0051.689] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0051.689] lstrlenW (lpString=".ppt") returned 4
	[0051.689] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0051.689] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0051.689] lstrlenW (lpString=".zip") returned 4
	[0051.689] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0051.689] lstrlenW (lpString=".rar") returned 4
	[0051.689] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0051.689] lstrlenW (lpString=".bz2") returned 4
	[0051.689] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0051.689] lstrlenW (lpString=".7z") returned 3
	[0051.689] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0051.689] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0051.689] lstrlenW (lpString=".dbf") returned 4
	[0051.689] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0051.689] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0051.689] lstrlenW (lpString=".1cd") returned 4
	[0051.689] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0051.689] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0051.689] lstrlenW (lpString=".jpg") returned 4
	[0051.689] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0051.689] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0051.689] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0051.689] lstrlenW (lpString=".doc") returned 4
	[0051.689] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0051.689] lstrlenW (lpString=".docx") returned 5
	[0051.689] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0051.689] lstrlenW (lpString=".pdf") returned 4
	[0051.689] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0051.689] lstrlenW (lpString=".xls") returned 4
	[0051.690] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0051.690] lstrlenW (lpString=".xlsx") returned 5
	[0051.690] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0051.690] lstrlenW (lpString=".ppt") returned 4
	[0051.690] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0051.690] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0051.690] lstrlenW (lpString=".zip") returned 4
	[0051.690] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0051.690] lstrlenW (lpString=".rar") returned 4
	[0051.690] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0051.690] lstrlenW (lpString=".bz2") returned 4
	[0051.690] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0051.690] lstrlenW (lpString=".7z") returned 3
	[0051.690] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0051.690] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0051.690] lstrlenW (lpString=".dbf") returned 4
	[0051.690] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0051.690] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0051.690] lstrlenW (lpString=".1cd") returned 4
	[0051.690] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0051.690] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0051.690] lstrlenW (lpString=".jpg") returned 4
	[0051.690] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0051.714] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0051.714] lstrlenW (lpString="PrjProrWW.msi") returned 13
	[0051.714] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0051.929] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=10798080) returned 1
	[0051.929] CloseHandle (hObject=0x1b8) returned 1
	[0051.929] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi")) returned 0x2020
	[0051.930] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.930] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0051.930] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0051.930] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0x0) returned 1
	[0051.930] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.930] ReadFile (in: hFile=0x1b8, lpBuffer=0x8920058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8920058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.949] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x36ec00, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.949] ReadFile (in: hFile=0x1b8, lpBuffer=0x8960058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8960058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.993] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0051.993] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xa0c400, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.993] ReadFile (in: hFile=0x1b8, lpBuffer=0x89a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x89a0058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0052.039] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.039] WriteFile (in: hFile=0x1b8, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xc0106, lpNumberOfBytesWritten=0x7edfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfcb0*=0xc0106, lpOverlapped=0x0) returned 1
	[0052.058] SetEndOfFile (hFile=0x1b8) returned 1
	[0052.058] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d1d100
	[0052.062] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0052.062] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0052.063] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x36ec00, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0052.063] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0052.524] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xa0c400, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0052.525] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0052.529] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d1d100 | out: hHeap=0x5350000) returned 1
	[0052.532] CloseHandle (hObject=0x1b8) returned 1
	[0052.839] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0052.839] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76
	[0052.839] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76
	[0052.839] lstrlenW (lpString=".doc") returned 4
	[0052.839] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0052.839] lstrlenW (lpString=".docx") returned 5
	[0052.839] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1
	[0052.839] lstrlenW (lpString=".pdf") returned 4
	[0052.840] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0052.840] lstrlenW (lpString=".xls") returned 4
	[0052.840] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0052.840] lstrlenW (lpString=".xlsx") returned 5
	[0052.840] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1
	[0052.840] lstrlenW (lpString=".ppt") returned 4
	[0052.840] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0052.840] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76
	[0052.840] lstrlenW (lpString=".zip") returned 4
	[0052.840] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0052.840] lstrlenW (lpString=".rar") returned 4
	[0052.840] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0052.840] lstrlenW (lpString=".bz2") returned 4
	[0052.840] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0052.840] lstrlenW (lpString=".7z") returned 3
	[0052.840] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0052.840] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76
	[0052.840] lstrlenW (lpString=".dbf") returned 4
	[0052.840] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0052.840] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76
	[0052.840] lstrlenW (lpString=".1cd") returned 4
	[0052.840] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0052.840] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76
	[0052.840] lstrlenW (lpString=".jpg") returned 4
	[0052.840] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0052.840] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76
	[0052.840] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76
	[0052.840] lstrlenW (lpString=".doc") returned 4
	[0052.840] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0052.840] lstrlenW (lpString=".docx") returned 5
	[0052.840] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1
	[0052.840] lstrlenW (lpString=".pdf") returned 4
	[0052.841] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0052.841] lstrlenW (lpString=".xls") returned 4
	[0052.841] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0052.841] lstrlenW (lpString=".xlsx") returned 5
	[0052.841] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1
	[0052.841] lstrlenW (lpString=".ppt") returned 4
	[0052.841] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0052.841] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76
	[0052.841] lstrlenW (lpString=".zip") returned 4
	[0052.841] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0052.841] lstrlenW (lpString=".rar") returned 4
	[0052.841] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0052.841] lstrlenW (lpString=".bz2") returned 4
	[0052.841] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0052.841] lstrlenW (lpString=".7z") returned 3
	[0052.841] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0052.841] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76
	[0052.841] lstrlenW (lpString=".dbf") returned 4
	[0052.841] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0052.841] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76
	[0052.841] lstrlenW (lpString=".1cd") returned 4
	[0052.841] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0052.841] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 76
	[0052.841] lstrlenW (lpString=".jpg") returned 4
	[0052.841] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0052.841] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0052.841] lstrlenW (lpString="Office32WW.msi") returned 14
	[0052.841] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0052.842] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=1992192) returned 1
	[0052.842] CloseHandle (hObject=0x1b0) returned 1
	[0052.842] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi")) returned 0x2020
	[0052.842] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.842] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0052.843] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0052.843] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0x0) returned 1
	[0052.843] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0052.843] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8920058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0052.849] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0052.849] ReadFile (in: hFile=0x1b0, lpBuffer=0x8960058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x8960058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0053.017] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x7edfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0053.017] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc2c | out: lpNewFilePointer=0x0) returned 1
	[0053.018] ReadFile (in: hFile=0x1b0, lpBuffer=0x89a0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x7edfc38, lpOverlapped=0x0 | out: lpBuffer=0x89a0058*, lpNumberOfBytesRead=0x7edfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0053.054] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.054] WriteFile (in: hFile=0x1b0, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x7edfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfcb0*=0xc0108, lpOverlapped=0x0) returned 1
	[0053.200] SetEndOfFile (hFile=0x1b0) returned 1
	[0053.200] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d5d120
	[0053.205] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0053.205] WriteFile (in: hFile=0x1b0, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0053.432] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0053.432] WriteFile (in: hFile=0x1b0, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0053.434] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x7edfc7c | out: lpNewFilePointer=0x0) returned 1
	[0053.434] WriteFile (in: hFile=0x1b0, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x7edfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x7edfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0053.436] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d5d120 | out: hHeap=0x5350000) returned 1
	[0053.436] CloseHandle (hObject=0x1b0) returned 1
	[0053.436] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0053.437] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0053.437] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0053.437] lstrlenW (lpString=".doc") returned 4
	[0053.437] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0053.437] lstrlenW (lpString=".docx") returned 5
	[0053.437] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1
	[0053.437] lstrlenW (lpString=".pdf") returned 4
	[0053.437] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0053.437] lstrlenW (lpString=".xls") returned 4
	[0053.437] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0053.437] lstrlenW (lpString=".xlsx") returned 5
	[0053.437] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1
	[0053.437] lstrlenW (lpString=".ppt") returned 4
	[0053.437] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0053.437] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0053.437] lstrlenW (lpString=".zip") returned 4
	[0053.437] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0053.437] lstrlenW (lpString=".rar") returned 4
	[0053.437] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0053.437] lstrlenW (lpString=".bz2") returned 4
	[0053.437] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0053.437] lstrlenW (lpString=".7z") returned 3
	[0053.437] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0053.437] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0053.438] lstrlenW (lpString=".dbf") returned 4
	[0053.438] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0053.438] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0053.438] lstrlenW (lpString=".1cd") returned 4
	[0053.438] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0053.438] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0053.438] lstrlenW (lpString=".jpg") returned 4
	[0053.438] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0053.438] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0053.438] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0053.438] lstrlenW (lpString=".doc") returned 4
	[0053.438] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0053.438] lstrlenW (lpString=".docx") returned 5
	[0053.438] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1
	[0053.438] lstrlenW (lpString=".pdf") returned 4
	[0053.438] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0053.439] lstrlenW (lpString=".xls") returned 4
	[0053.439] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0053.439] lstrlenW (lpString=".xlsx") returned 5
	[0053.439] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1
	[0053.439] lstrlenW (lpString=".ppt") returned 4
	[0053.439] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0053.439] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0053.439] lstrlenW (lpString=".zip") returned 4
	[0053.439] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0053.439] lstrlenW (lpString=".rar") returned 4
	[0053.439] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0053.439] lstrlenW (lpString=".bz2") returned 4
	[0053.439] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0053.439] lstrlenW (lpString=".7z") returned 3
	[0053.439] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0053.439] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0053.439] lstrlenW (lpString=".dbf") returned 4
	[0053.439] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0053.439] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0053.439] lstrlenW (lpString=".1cd") returned 4
	[0053.439] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0053.439] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0053.439] lstrlenW (lpString=".jpg") returned 4
	[0053.439] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0053.439] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0053.439] lstrlenW (lpString="PidGenX.dll") returned 11
	[0053.439] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0053.440] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=1463568) returned 1
	[0053.440] CloseHandle (hObject=0x1b0) returned 1
	[0053.440] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 0x2020
	[0053.440] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0053.440] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0053.440] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.440] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.440] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0053.441] GetLastError () returned 0x0
	[0053.441] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0xffff0, lpOverlapped=0x0) returned 1
	[0053.541] WriteFile (in: hFile=0x1e0, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xffff0, lpOverlapped=0x0) returned 1
	[0053.752] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x65520, lpOverlapped=0x0) returned 1
	[0053.773] WriteFile (in: hFile=0x1e0, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0x65530, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0x65530, lpOverlapped=0x0) returned 1
	[0053.867] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0053.867] WriteFile (in: hFile=0x1e0, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xea, lpOverlapped=0x0) returned 1
	[0053.868] SetEndOfFile (hFile=0x1e0) returned 1
	[0054.005] CloseHandle (hObject=0x1e0) returned 1
	[0054.005] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0054.005] SetEndOfFile (hFile=0x1b0) returned 1
	[0054.009] CloseHandle (hObject=0x1b0) returned 1
	[0054.009] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0054.009] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 1
	[0054.893] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0054.895] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0054.898] lstrlenW (lpString=".doc") returned 4
	[0054.898] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0054.901] lstrlenW (lpString=".docx") returned 5
	[0054.906] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1
	[0054.907] lstrlenW (lpString=".pdf") returned 4
	[0054.911] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0054.911] lstrlenW (lpString=".xls") returned 4
	[0054.911] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0054.911] lstrlenW (lpString=".xlsx") returned 5
	[0054.911] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1
	[0054.911] lstrlenW (lpString=".ppt") returned 4
	[0054.911] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0054.911] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0054.911] lstrlenW (lpString=".zip") returned 4
	[0054.911] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0054.911] lstrlenW (lpString=".rar") returned 4
	[0054.911] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0054.912] lstrlenW (lpString=".bz2") returned 4
	[0054.912] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0054.912] lstrlenW (lpString=".7z") returned 3
	[0054.912] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0054.912] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0054.912] lstrlenW (lpString=".dbf") returned 4
	[0054.912] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0054.912] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0054.912] lstrlenW (lpString=".1cd") returned 4
	[0054.912] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0054.912] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0054.912] lstrlenW (lpString=".jpg") returned 4
	[0054.912] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0054.912] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0054.912] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0054.912] lstrlenW (lpString=".doc") returned 4
	[0054.912] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0054.912] lstrlenW (lpString=".docx") returned 5
	[0054.912] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1
	[0054.912] lstrlenW (lpString=".pdf") returned 4
	[0054.912] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0054.912] lstrlenW (lpString=".xls") returned 4
	[0054.912] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0054.912] lstrlenW (lpString=".xlsx") returned 5
	[0054.912] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1
	[0054.912] lstrlenW (lpString=".ppt") returned 4
	[0054.912] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0054.912] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0054.912] lstrlenW (lpString=".zip") returned 4
	[0054.912] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0054.913] lstrlenW (lpString=".rar") returned 4
	[0054.913] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0054.913] lstrlenW (lpString=".bz2") returned 4
	[0054.913] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0054.913] lstrlenW (lpString=".7z") returned 3
	[0054.913] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0054.913] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0054.913] lstrlenW (lpString=".dbf") returned 4
	[0054.913] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0054.913] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0054.913] lstrlenW (lpString=".1cd") returned 4
	[0054.913] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0054.913] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0054.913] lstrlenW (lpString=".jpg") returned 4
	[0054.913] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0054.913] lstrcmpiW (lpString1=".sys", lpString2=".beets") returned 1
	[0054.913] lstrlenW (lpString="pagefile.sys") returned 12
	[0054.913] CreateFileW (lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0054.913] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0054.913] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0054.913] lstrlenW (lpString=".doc") returned 4
	[0054.913] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0054.913] lstrlenW (lpString=".docx") returned 5
	[0054.914] lstrcmpiW (lpString1=".docx", lpString2="e.sys") returned -1
	[0054.914] lstrlenW (lpString=".pdf") returned 4
	[0054.914] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0054.914] lstrlenW (lpString=".xls") returned 4
	[0054.914] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0054.914] lstrlenW (lpString=".xlsx") returned 5
	[0054.914] lstrcmpiW (lpString1=".xlsx", lpString2="e.sys") returned -1
	[0054.914] lstrlenW (lpString=".ppt") returned 4
	[0054.914] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0054.914] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0054.914] lstrlenW (lpString=".zip") returned 4
	[0054.914] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0054.914] lstrlenW (lpString=".rar") returned 4
	[0054.914] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0054.914] lstrlenW (lpString=".bz2") returned 4
	[0054.914] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0054.914] lstrlenW (lpString=".7z") returned 3
	[0054.914] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0054.914] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0054.914] lstrlenW (lpString=".dbf") returned 4
	[0054.914] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0054.914] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0054.914] lstrlenW (lpString=".1cd") returned 4
	[0054.914] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0054.914] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0054.914] lstrlenW (lpString=".jpg") returned 4
	[0054.914] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0054.914] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0054.914] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0054.914] lstrlenW (lpString=".doc") returned 4
	[0054.915] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0054.915] lstrlenW (lpString=".docx") returned 5
	[0054.915] lstrcmpiW (lpString1=".docx", lpString2="e.sys") returned -1
	[0054.915] lstrlenW (lpString=".pdf") returned 4
	[0054.915] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0054.915] lstrlenW (lpString=".xls") returned 4
	[0054.915] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0054.915] lstrlenW (lpString=".xlsx") returned 5
	[0054.915] lstrcmpiW (lpString1=".xlsx", lpString2="e.sys") returned -1
	[0054.915] lstrlenW (lpString=".ppt") returned 4
	[0054.915] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0054.915] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0054.915] lstrlenW (lpString=".zip") returned 4
	[0054.915] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0054.915] lstrlenW (lpString=".rar") returned 4
	[0054.915] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0054.915] lstrlenW (lpString=".bz2") returned 4
	[0054.915] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0054.915] lstrlenW (lpString=".7z") returned 3
	[0054.915] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0054.915] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0054.915] lstrlenW (lpString=".dbf") returned 4
	[0054.915] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0054.915] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0054.915] lstrlenW (lpString=".1cd") returned 4
	[0054.915] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0054.915] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0054.915] lstrlenW (lpString=".jpg") returned 4
	[0054.915] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0054.916] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0054.916] lstrlenW (lpString="MSADDNDR.DLL") returned 12
	[0054.916] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0055.226] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=99136) returned 1
	[0055.226] CloseHandle (hObject=0x1b0) returned 1
	[0055.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll")) returned 0x20
	[0055.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.226] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0055.226] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.226] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.226] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0055.227] GetLastError () returned 0x0
	[0055.227] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x18340, lpOverlapped=0x0) returned 1
	[0055.233] WriteFile (in: hFile=0x1d4, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0x18350, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0x18350, lpOverlapped=0x0) returned 1
	[0055.236] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.237] WriteFile (in: hFile=0x1d4, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0055.237] SetEndOfFile (hFile=0x1d4) returned 1
	[0055.237] CloseHandle (hObject=0x1d4) returned 1
	[0055.237] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.237] SetEndOfFile (hFile=0x1b0) returned 1
	[0055.238] CloseHandle (hObject=0x1b0) returned 1
	[0055.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.239] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll")) returned 1
	[0055.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51
	[0055.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51
	[0055.239] lstrlenW (lpString=".doc") returned 4
	[0055.239] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0055.239] lstrlenW (lpString=".docx") returned 5
	[0055.239] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1
	[0055.239] lstrlenW (lpString=".pdf") returned 4
	[0055.239] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0055.239] lstrlenW (lpString=".xls") returned 4
	[0055.239] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0055.239] lstrlenW (lpString=".xlsx") returned 5
	[0055.239] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1
	[0055.239] lstrlenW (lpString=".ppt") returned 4
	[0055.239] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0055.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51
	[0055.239] lstrlenW (lpString=".zip") returned 4
	[0055.239] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0055.239] lstrlenW (lpString=".rar") returned 4
	[0055.239] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0055.239] lstrlenW (lpString=".bz2") returned 4
	[0055.240] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0055.240] lstrlenW (lpString=".7z") returned 3
	[0055.240] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0055.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51
	[0055.240] lstrlenW (lpString=".dbf") returned 4
	[0055.240] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0055.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51
	[0055.240] lstrlenW (lpString=".1cd") returned 4
	[0055.240] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0055.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51
	[0055.240] lstrlenW (lpString=".jpg") returned 4
	[0055.240] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0055.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51
	[0055.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51
	[0055.240] lstrlenW (lpString=".doc") returned 4
	[0055.240] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0055.240] lstrlenW (lpString=".docx") returned 5
	[0055.240] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1
	[0055.240] lstrlenW (lpString=".pdf") returned 4
	[0055.240] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0055.240] lstrlenW (lpString=".xls") returned 4
	[0055.240] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0055.240] lstrlenW (lpString=".xlsx") returned 5
	[0055.240] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1
	[0055.240] lstrlenW (lpString=".ppt") returned 4
	[0055.240] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0055.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51
	[0055.240] lstrlenW (lpString=".zip") returned 4
	[0055.240] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0055.240] lstrlenW (lpString=".rar") returned 4
	[0055.240] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0055.240] lstrlenW (lpString=".bz2") returned 4
	[0055.241] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0055.241] lstrlenW (lpString=".7z") returned 3
	[0055.241] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0055.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51
	[0055.241] lstrlenW (lpString=".dbf") returned 4
	[0055.241] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0055.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51
	[0055.241] lstrlenW (lpString=".1cd") returned 4
	[0055.241] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0055.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL") returned 51
	[0055.241] lstrlenW (lpString=".jpg") returned 4
	[0055.241] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0055.241] lstrcmpiW (lpString1=".EXE", lpString2=".beets") returned 1
	[0055.241] lstrlenW (lpString="DW20.EXE") returned 8
	[0055.241] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0055.242] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=994184) returned 1
	[0055.242] CloseHandle (hObject=0x1b0) returned 1
	[0055.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe")) returned 0x20
	[0055.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.242] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0055.243] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.243] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.243] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0055.245] GetLastError () returned 0x0
	[0055.245] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0xf2b88, lpOverlapped=0x0) returned 1
	[0055.266] WriteFile (in: hFile=0x1d4, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xf2b90, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xf2b90, lpOverlapped=0x0) returned 1
	[0055.285] ReadFile (in: hFile=0x1b0, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.285] WriteFile (in: hFile=0x1d4, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xe4, lpOverlapped=0x0) returned 1
	[0055.285] SetEndOfFile (hFile=0x1d4) returned 1
	[0055.286] CloseHandle (hObject=0x1d4) returned 1
	[0055.286] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.286] SetEndOfFile (hFile=0x1b0) returned 1
	[0055.294] CloseHandle (hObject=0x1b0) returned 1
	[0055.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.439] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe")) returned 1
	[0055.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58
	[0055.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58
	[0055.847] lstrlenW (lpString=".doc") returned 4
	[0055.849] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0055.849] lstrlenW (lpString=".docx") returned 5
	[0055.853] lstrcmpiW (lpString1=".docx", lpString2="0.EXE") returned -1
	[0055.853] lstrlenW (lpString=".pdf") returned 4
	[0055.854] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0055.854] lstrlenW (lpString=".xls") returned 4
	[0055.856] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0055.860] lstrlenW (lpString=".xlsx") returned 5
	[0055.860] lstrcmpiW (lpString1=".xlsx", lpString2="0.EXE") returned -1
	[0055.862] lstrlenW (lpString=".ppt") returned 4
	[0055.862] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0055.862] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58
	[0055.862] lstrlenW (lpString=".zip") returned 4
	[0055.862] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0055.863] lstrlenW (lpString=".rar") returned 4
	[0055.863] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0055.863] lstrlenW (lpString=".bz2") returned 4
	[0055.863] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0055.863] lstrlenW (lpString=".7z") returned 3
	[0055.863] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0055.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58
	[0055.863] lstrlenW (lpString=".dbf") returned 4
	[0055.863] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0055.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58
	[0055.863] lstrlenW (lpString=".1cd") returned 4
	[0055.863] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0055.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58
	[0055.863] lstrlenW (lpString=".jpg") returned 4
	[0055.863] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0055.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58
	[0055.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58
	[0055.863] lstrlenW (lpString=".doc") returned 4
	[0055.863] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0055.863] lstrlenW (lpString=".docx") returned 5
	[0055.863] lstrcmpiW (lpString1=".docx", lpString2="0.EXE") returned -1
	[0055.863] lstrlenW (lpString=".pdf") returned 4
	[0055.863] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0055.863] lstrlenW (lpString=".xls") returned 4
	[0055.863] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0055.863] lstrlenW (lpString=".xlsx") returned 5
	[0055.863] lstrcmpiW (lpString1=".xlsx", lpString2="0.EXE") returned -1
	[0055.863] lstrlenW (lpString=".ppt") returned 4
	[0055.863] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0055.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58
	[0055.864] lstrlenW (lpString=".zip") returned 4
	[0055.864] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0055.864] lstrlenW (lpString=".rar") returned 4
	[0055.864] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0055.864] lstrlenW (lpString=".bz2") returned 4
	[0055.864] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0055.864] lstrlenW (lpString=".7z") returned 3
	[0055.864] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0055.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58
	[0055.864] lstrlenW (lpString=".dbf") returned 4
	[0055.864] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0055.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58
	[0055.864] lstrlenW (lpString=".1cd") returned 4
	[0055.864] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0055.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE") returned 58
	[0055.864] lstrlenW (lpString=".jpg") returned 4
	[0055.864] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0055.864] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0055.864] lstrlenW (lpString="offfiltx.dll") returned 12
	[0055.864] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0056.126] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=1486736) returned 1
	[0056.126] CloseHandle (hObject=0x218) returned 1
	[0056.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll")) returned 0x20
	[0056.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0056.127] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0056.127] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0056.127] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0056.127] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c
	[0056.128] GetLastError () returned 0x0
	[0056.128] ReadFile (in: hFile=0x218, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0xffff0, lpOverlapped=0x0) returned 1
	[0056.154] WriteFile (in: hFile=0x16c, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xffff0, lpOverlapped=0x0) returned 1
	[0057.081] ReadFile (in: hFile=0x218, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x6afa0, lpOverlapped=0x0) returned 1
	[0057.096] WriteFile (in: hFile=0x16c, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0x6afb0, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0x6afb0, lpOverlapped=0x0) returned 1
	[0057.106] ReadFile (in: hFile=0x218, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.106] WriteFile (in: hFile=0x16c, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.106] SetEndOfFile (hFile=0x16c) returned 1
	[0057.107] CloseHandle (hObject=0x16c) returned 1
	[0057.107] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.107] SetEndOfFile (hFile=0x218) returned 1
	[0057.111] CloseHandle (hObject=0x218) returned 1
	[0057.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.111] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll")) returned 1
	[0057.111] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67
	[0057.111] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67
	[0057.111] lstrlenW (lpString=".doc") returned 4
	[0057.111] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0057.111] lstrlenW (lpString=".docx") returned 5
	[0057.111] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1
	[0057.111] lstrlenW (lpString=".pdf") returned 4
	[0057.112] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0057.112] lstrlenW (lpString=".xls") returned 4
	[0057.112] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0057.112] lstrlenW (lpString=".xlsx") returned 5
	[0057.112] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1
	[0057.112] lstrlenW (lpString=".ppt") returned 4
	[0057.112] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0057.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67
	[0057.112] lstrlenW (lpString=".zip") returned 4
	[0057.112] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0057.112] lstrlenW (lpString=".rar") returned 4
	[0057.112] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0057.112] lstrlenW (lpString=".bz2") returned 4
	[0057.112] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0057.112] lstrlenW (lpString=".7z") returned 3
	[0057.112] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0057.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67
	[0057.112] lstrlenW (lpString=".dbf") returned 4
	[0057.112] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0057.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67
	[0057.112] lstrlenW (lpString=".1cd") returned 4
	[0057.112] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0057.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67
	[0057.112] lstrlenW (lpString=".jpg") returned 4
	[0057.112] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0057.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67
	[0057.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67
	[0057.112] lstrlenW (lpString=".doc") returned 4
	[0057.112] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0057.112] lstrlenW (lpString=".docx") returned 5
	[0057.112] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1
	[0057.112] lstrlenW (lpString=".pdf") returned 4
	[0057.113] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0057.113] lstrlenW (lpString=".xls") returned 4
	[0057.113] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0057.113] lstrlenW (lpString=".xlsx") returned 5
	[0057.113] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1
	[0057.113] lstrlenW (lpString=".ppt") returned 4
	[0057.113] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0057.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67
	[0057.113] lstrlenW (lpString=".zip") returned 4
	[0057.113] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0057.113] lstrlenW (lpString=".rar") returned 4
	[0057.113] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0057.113] lstrlenW (lpString=".bz2") returned 4
	[0057.113] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0057.113] lstrlenW (lpString=".7z") returned 3
	[0057.113] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0057.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67
	[0057.113] lstrlenW (lpString=".dbf") returned 4
	[0057.113] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0057.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67
	[0057.113] lstrlenW (lpString=".1cd") returned 4
	[0057.113] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0057.113] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll") returned 67
	[0057.113] lstrlenW (lpString=".jpg") returned 4
	[0057.113] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0057.113] lstrcmpiW (lpString1=".FLT", lpString2=".beets") returned 1
	[0057.113] lstrlenW (lpString="JPEGIM32.FLT") returned 12
	[0057.113] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0057.309] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=241024) returned 1
	[0057.309] CloseHandle (hObject=0x204) returned 1
	[0057.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt")) returned 0x20
	[0057.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0057.330] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0057.330] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.338] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.338] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0057.639] GetLastError () returned 0x0
	[0057.639] ReadFile (in: hFile=0x204, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x3ad80, lpOverlapped=0x0) returned 1
	[0057.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0x3ad90, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0x3ad90, lpOverlapped=0x0) returned 1
	[0057.654] ReadFile (in: hFile=0x204, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.654] SetEndOfFile (hFile=0x1ec) returned 1
	[0057.654] CloseHandle (hObject=0x1ec) returned 1
	[0057.654] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.654] SetEndOfFile (hFile=0x204) returned 1
	[0057.656] CloseHandle (hObject=0x204) returned 1
	[0057.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.657] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt")) returned 1
	[0057.657] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67
	[0057.657] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67
	[0057.657] lstrlenW (lpString=".doc") returned 4
	[0057.657] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0057.657] lstrlenW (lpString=".docx") returned 5
	[0057.657] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0057.657] lstrlenW (lpString=".pdf") returned 4
	[0057.657] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0057.657] lstrlenW (lpString=".xls") returned 4
	[0057.657] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0057.657] lstrlenW (lpString=".xlsx") returned 5
	[0057.657] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0057.657] lstrlenW (lpString=".ppt") returned 4
	[0057.657] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0057.657] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67
	[0057.657] lstrlenW (lpString=".zip") returned 4
	[0057.657] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0057.657] lstrlenW (lpString=".rar") returned 4
	[0057.657] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0057.657] lstrlenW (lpString=".bz2") returned 4
	[0057.657] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0057.658] lstrlenW (lpString=".7z") returned 3
	[0057.658] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0057.658] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67
	[0057.658] lstrlenW (lpString=".dbf") returned 4
	[0057.658] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0057.658] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67
	[0057.658] lstrlenW (lpString=".1cd") returned 4
	[0057.658] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0057.658] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67
	[0057.658] lstrlenW (lpString=".jpg") returned 4
	[0057.658] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0057.658] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67
	[0057.658] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67
	[0057.658] lstrlenW (lpString=".doc") returned 4
	[0057.658] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0057.658] lstrlenW (lpString=".docx") returned 5
	[0057.658] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0057.658] lstrlenW (lpString=".pdf") returned 4
	[0057.658] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0057.658] lstrlenW (lpString=".xls") returned 4
	[0057.658] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0057.658] lstrlenW (lpString=".xlsx") returned 5
	[0057.658] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0057.658] lstrlenW (lpString=".ppt") returned 4
	[0057.658] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0057.658] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67
	[0057.658] lstrlenW (lpString=".zip") returned 4
	[0057.658] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0057.658] lstrlenW (lpString=".rar") returned 4
	[0057.658] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0057.658] lstrlenW (lpString=".bz2") returned 4
	[0057.658] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0057.659] lstrlenW (lpString=".7z") returned 3
	[0057.659] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0057.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67
	[0057.659] lstrlenW (lpString=".dbf") returned 4
	[0057.659] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0057.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67
	[0057.659] lstrlenW (lpString=".1cd") returned 4
	[0057.659] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0057.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT") returned 67
	[0057.659] lstrlenW (lpString=".jpg") returned 4
	[0057.659] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0057.659] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0057.659] lstrlenW (lpString="msitss55.dll") returned 12
	[0057.659] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0059.217] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=430080) returned 1
	[0059.217] CloseHandle (hObject=0x1f8) returned 1
	[0059.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll")) returned 0x20
	[0059.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.217] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0059.217] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.217] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.217] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0059.218] GetLastError () returned 0x0
	[0059.218] ReadFile (in: hFile=0x1f8, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x69000, lpOverlapped=0x0) returned 1
	[0059.228] WriteFile (in: hFile=0x1e8, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0x69010, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0x69010, lpOverlapped=0x0) returned 1
	[0059.236] ReadFile (in: hFile=0x1f8, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0059.236] WriteFile (in: hFile=0x1e8, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0059.237] SetEndOfFile (hFile=0x1e8) returned 1
	[0059.237] CloseHandle (hObject=0x1e8) returned 1
	[0059.237] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.237] SetEndOfFile (hFile=0x1f8) returned 1
	[0059.242] CloseHandle (hObject=0x1f8) returned 1
	[0059.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0059.242] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll")) returned 1
	[0059.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64
	[0059.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64
	[0059.242] lstrlenW (lpString=".doc") returned 4
	[0059.242] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0059.242] lstrlenW (lpString=".docx") returned 5
	[0059.243] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0059.243] lstrlenW (lpString=".pdf") returned 4
	[0059.243] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0059.243] lstrlenW (lpString=".xls") returned 4
	[0059.243] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0059.243] lstrlenW (lpString=".xlsx") returned 5
	[0059.243] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0059.243] lstrlenW (lpString=".ppt") returned 4
	[0059.243] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0059.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64
	[0059.243] lstrlenW (lpString=".zip") returned 4
	[0059.243] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0059.243] lstrlenW (lpString=".rar") returned 4
	[0059.243] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0059.243] lstrlenW (lpString=".bz2") returned 4
	[0059.243] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0059.243] lstrlenW (lpString=".7z") returned 3
	[0059.243] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0059.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64
	[0059.243] lstrlenW (lpString=".dbf") returned 4
	[0059.243] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0059.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64
	[0059.243] lstrlenW (lpString=".1cd") returned 4
	[0059.243] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0059.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64
	[0059.243] lstrlenW (lpString=".jpg") returned 4
	[0059.243] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0059.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64
	[0059.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64
	[0059.244] lstrlenW (lpString=".doc") returned 4
	[0059.244] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0059.244] lstrlenW (lpString=".docx") returned 5
	[0059.244] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0059.244] lstrlenW (lpString=".pdf") returned 4
	[0059.244] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0059.244] lstrlenW (lpString=".xls") returned 4
	[0059.244] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0059.244] lstrlenW (lpString=".xlsx") returned 5
	[0059.244] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0059.244] lstrlenW (lpString=".ppt") returned 4
	[0059.244] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0059.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64
	[0059.244] lstrlenW (lpString=".zip") returned 4
	[0059.244] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0059.244] lstrlenW (lpString=".rar") returned 4
	[0059.244] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0059.244] lstrlenW (lpString=".bz2") returned 4
	[0059.244] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0059.244] lstrlenW (lpString=".7z") returned 3
	[0059.244] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0059.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64
	[0059.244] lstrlenW (lpString=".dbf") returned 4
	[0059.244] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0059.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64
	[0059.244] lstrlenW (lpString=".1cd") returned 4
	[0059.244] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0059.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll") returned 64
	[0059.244] lstrlenW (lpString=".jpg") returned 4
	[0059.244] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0059.245] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0059.245] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0059.245] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0059.246] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=3584) returned 1
	[0059.246] CloseHandle (hObject=0x1f8) returned 1
	[0059.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20
	[0059.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.246] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0059.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0059.246] lstrlenW (lpString=".doc") returned 4
	[0059.246] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.247] lstrlenW (lpString=".docx") returned 5
	[0059.247] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.247] lstrlenW (lpString=".pdf") returned 4
	[0059.247] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.247] lstrlenW (lpString=".xls") returned 4
	[0059.247] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.247] lstrlenW (lpString=".xlsx") returned 5
	[0059.247] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.247] lstrlenW (lpString=".ppt") returned 4
	[0059.247] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.247] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0059.247] lstrlenW (lpString=".zip") returned 4
	[0059.247] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.247] lstrlenW (lpString=".rar") returned 4
	[0059.247] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.247] lstrlenW (lpString=".bz2") returned 4
	[0059.247] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.247] lstrlenW (lpString=".7z") returned 3
	[0059.247] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.247] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0059.247] lstrlenW (lpString=".dbf") returned 4
	[0059.247] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.247] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0059.247] lstrlenW (lpString=".1cd") returned 4
	[0059.247] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.247] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0059.247] lstrlenW (lpString=".jpg") returned 4
	[0059.247] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.247] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0059.247] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0059.247] lstrlenW (lpString=".doc") returned 4
	[0059.247] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.248] lstrlenW (lpString=".docx") returned 5
	[0059.248] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.248] lstrlenW (lpString=".pdf") returned 4
	[0059.248] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.248] lstrlenW (lpString=".xls") returned 4
	[0059.248] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.248] lstrlenW (lpString=".xlsx") returned 5
	[0059.248] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.248] lstrlenW (lpString=".ppt") returned 4
	[0059.248] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.248] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0059.248] lstrlenW (lpString=".zip") returned 4
	[0059.248] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.248] lstrlenW (lpString=".rar") returned 4
	[0059.248] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.248] lstrlenW (lpString=".bz2") returned 4
	[0059.248] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.248] lstrlenW (lpString=".7z") returned 3
	[0059.248] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.248] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0059.248] lstrlenW (lpString=".dbf") returned 4
	[0059.248] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.248] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0059.248] lstrlenW (lpString=".1cd") returned 4
	[0059.248] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.248] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0059.248] lstrlenW (lpString=".jpg") returned 4
	[0059.248] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.248] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0059.249] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0059.249] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0059.249] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=4096) returned 1
	[0059.249] CloseHandle (hObject=0x1f8) returned 1
	[0059.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20
	[0059.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.250] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.250] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0059.250] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0059.250] lstrlenW (lpString=".doc") returned 4
	[0059.250] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.250] lstrlenW (lpString=".docx") returned 5
	[0059.250] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.250] lstrlenW (lpString=".pdf") returned 4
	[0059.250] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.250] lstrlenW (lpString=".xls") returned 4
	[0059.250] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.250] lstrlenW (lpString=".xlsx") returned 5
	[0059.250] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.250] lstrlenW (lpString=".ppt") returned 4
	[0059.250] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.250] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0059.250] lstrlenW (lpString=".zip") returned 4
	[0059.250] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.250] lstrlenW (lpString=".rar") returned 4
	[0059.250] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.250] lstrlenW (lpString=".bz2") returned 4
	[0059.250] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.250] lstrlenW (lpString=".7z") returned 3
	[0059.250] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.250] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0059.250] lstrlenW (lpString=".dbf") returned 4
	[0059.250] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.250] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0059.250] lstrlenW (lpString=".1cd") returned 4
	[0059.250] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.250] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0059.250] lstrlenW (lpString=".jpg") returned 4
	[0059.250] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0059.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0059.251] lstrlenW (lpString=".doc") returned 4
	[0059.251] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.251] lstrlenW (lpString=".docx") returned 5
	[0059.251] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.251] lstrlenW (lpString=".pdf") returned 4
	[0059.251] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.251] lstrlenW (lpString=".xls") returned 4
	[0059.251] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.251] lstrlenW (lpString=".xlsx") returned 5
	[0059.251] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.251] lstrlenW (lpString=".ppt") returned 4
	[0059.251] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0059.251] lstrlenW (lpString=".zip") returned 4
	[0059.251] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.251] lstrlenW (lpString=".rar") returned 4
	[0059.251] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.251] lstrlenW (lpString=".bz2") returned 4
	[0059.251] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.251] lstrlenW (lpString=".7z") returned 3
	[0059.251] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0059.251] lstrlenW (lpString=".dbf") returned 4
	[0059.251] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0059.251] lstrlenW (lpString=".1cd") returned 4
	[0059.251] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0059.251] lstrlenW (lpString=".jpg") returned 4
	[0059.251] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.252] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0059.252] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0059.252] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0059.252] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=3584) returned 1
	[0059.252] CloseHandle (hObject=0x1f8) returned 1
	[0059.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20
	[0059.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.253] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui") returned 72
	[0059.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui") returned 72
	[0059.253] lstrlenW (lpString=".doc") returned 4
	[0059.253] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.253] lstrlenW (lpString=".docx") returned 5
	[0059.253] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.253] lstrlenW (lpString=".pdf") returned 4
	[0059.253] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.253] lstrlenW (lpString=".xls") returned 4
	[0059.253] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.253] lstrlenW (lpString=".xlsx") returned 5
	[0059.253] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.253] lstrlenW (lpString=".ppt") returned 4
	[0059.253] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui") returned 72
	[0059.253] lstrlenW (lpString=".zip") returned 4
	[0059.253] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.253] lstrlenW (lpString=".rar") returned 4
	[0059.253] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.253] lstrlenW (lpString=".bz2") returned 4
	[0059.253] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.253] lstrlenW (lpString=".7z") returned 3
	[0059.253] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui") returned 72
	[0059.253] lstrlenW (lpString=".dbf") returned 4
	[0059.253] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui") returned 72
	[0059.253] lstrlenW (lpString=".1cd") returned 4
	[0059.253] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui") returned 72
	[0059.254] lstrlenW (lpString=".jpg") returned 4
	[0059.254] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui") returned 72
	[0059.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui") returned 72
	[0059.254] lstrlenW (lpString=".doc") returned 4
	[0059.254] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.254] lstrlenW (lpString=".docx") returned 5
	[0059.254] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.254] lstrlenW (lpString=".pdf") returned 4
	[0059.254] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.254] lstrlenW (lpString=".xls") returned 4
	[0059.254] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.254] lstrlenW (lpString=".xlsx") returned 5
	[0059.254] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.254] lstrlenW (lpString=".ppt") returned 4
	[0059.254] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui") returned 72
	[0059.254] lstrlenW (lpString=".zip") returned 4
	[0059.254] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.254] lstrlenW (lpString=".rar") returned 4
	[0059.254] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.254] lstrlenW (lpString=".bz2") returned 4
	[0059.254] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.254] lstrlenW (lpString=".7z") returned 3
	[0059.254] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui") returned 72
	[0059.254] lstrlenW (lpString=".dbf") returned 4
	[0059.254] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui") returned 72
	[0059.254] lstrlenW (lpString=".1cd") returned 4
	[0059.254] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui") returned 72
	[0059.254] lstrlenW (lpString=".jpg") returned 4
	[0059.255] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.255] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0059.255] lstrlenW (lpString="rtscom.dll") returned 10
	[0059.255] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0059.255] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=169984) returned 1
	[0059.255] CloseHandle (hObject=0x1f8) returned 1
	[0059.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20
	[0059.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.256] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll") returned 61
	[0059.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll") returned 61
	[0059.256] lstrlenW (lpString=".doc") returned 4
	[0059.256] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0059.256] lstrlenW (lpString=".docx") returned 5
	[0059.256] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0059.256] lstrlenW (lpString=".pdf") returned 4
	[0059.256] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0059.256] lstrlenW (lpString=".xls") returned 4
	[0059.256] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0059.256] lstrlenW (lpString=".xlsx") returned 5
	[0059.256] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0059.256] lstrlenW (lpString=".ppt") returned 4
	[0059.256] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0059.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll") returned 61
	[0059.256] lstrlenW (lpString=".zip") returned 4
	[0059.256] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0059.256] lstrlenW (lpString=".rar") returned 4
	[0059.256] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0059.256] lstrlenW (lpString=".bz2") returned 4
	[0059.256] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0059.397] lstrlenW (lpString=".7z") returned 3
	[0059.397] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0059.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll") returned 61
	[0059.397] lstrlenW (lpString=".dbf") returned 4
	[0059.397] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0059.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll") returned 61
	[0059.397] lstrlenW (lpString=".1cd") returned 4
	[0059.397] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0059.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll") returned 61
	[0059.397] lstrlenW (lpString=".jpg") returned 4
	[0059.397] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0059.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll") returned 61
	[0059.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll") returned 61
	[0059.397] lstrlenW (lpString=".doc") returned 4
	[0059.397] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0059.397] lstrlenW (lpString=".docx") returned 5
	[0059.397] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0059.397] lstrlenW (lpString=".pdf") returned 4
	[0059.398] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0059.398] lstrlenW (lpString=".xls") returned 4
	[0059.398] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0059.398] lstrlenW (lpString=".xlsx") returned 5
	[0059.398] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0059.398] lstrlenW (lpString=".ppt") returned 4
	[0059.398] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0059.398] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll") returned 61
	[0059.398] lstrlenW (lpString=".zip") returned 4
	[0059.398] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0059.398] lstrlenW (lpString=".rar") returned 4
	[0059.398] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0059.398] lstrlenW (lpString=".bz2") returned 4
	[0059.398] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0059.398] lstrlenW (lpString=".7z") returned 3
	[0059.398] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0059.398] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll") returned 61
	[0059.398] lstrlenW (lpString=".dbf") returned 4
	[0059.398] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0059.398] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll") returned 61
	[0059.398] lstrlenW (lpString=".1cd") returned 4
	[0059.398] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0059.398] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll") returned 61
	[0059.398] lstrlenW (lpString=".jpg") returned 4
	[0059.398] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0059.398] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0059.398] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0059.398] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0059.551] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=3584) returned 1
	[0059.551] CloseHandle (hObject=0x238) returned 1
	[0059.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20
	[0059.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.551] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui") returned 72
	[0059.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui") returned 72
	[0059.551] lstrlenW (lpString=".doc") returned 4
	[0059.551] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.551] lstrlenW (lpString=".docx") returned 5
	[0059.551] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.551] lstrlenW (lpString=".pdf") returned 4
	[0059.551] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.551] lstrlenW (lpString=".xls") returned 4
	[0059.551] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.551] lstrlenW (lpString=".xlsx") returned 5
	[0059.551] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.551] lstrlenW (lpString=".ppt") returned 4
	[0059.551] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui") returned 72
	[0059.551] lstrlenW (lpString=".zip") returned 4
	[0059.551] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.551] lstrlenW (lpString=".rar") returned 4
	[0059.552] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.552] lstrlenW (lpString=".bz2") returned 4
	[0059.552] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.552] lstrlenW (lpString=".7z") returned 3
	[0059.552] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.552] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui") returned 72
	[0059.552] lstrlenW (lpString=".dbf") returned 4
	[0059.552] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.552] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui") returned 72
	[0059.552] lstrlenW (lpString=".1cd") returned 4
	[0059.552] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.552] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui") returned 72
	[0059.552] lstrlenW (lpString=".jpg") returned 4
	[0059.552] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.552] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui") returned 72
	[0059.552] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui") returned 72
	[0059.552] lstrlenW (lpString=".doc") returned 4
	[0059.552] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.552] lstrlenW (lpString=".docx") returned 5
	[0059.552] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.552] lstrlenW (lpString=".pdf") returned 4
	[0059.552] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.552] lstrlenW (lpString=".xls") returned 4
	[0059.552] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.552] lstrlenW (lpString=".xlsx") returned 5
	[0059.552] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.552] lstrlenW (lpString=".ppt") returned 4
	[0059.552] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.552] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui") returned 72
	[0059.552] lstrlenW (lpString=".zip") returned 4
	[0059.552] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.552] lstrlenW (lpString=".rar") returned 4
	[0059.553] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.553] lstrlenW (lpString=".bz2") returned 4
	[0059.553] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.553] lstrlenW (lpString=".7z") returned 3
	[0059.553] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.553] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui") returned 72
	[0059.553] lstrlenW (lpString=".dbf") returned 4
	[0059.553] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.553] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui") returned 72
	[0059.553] lstrlenW (lpString=".1cd") returned 4
	[0059.553] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.553] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui") returned 72
	[0059.553] lstrlenW (lpString=".jpg") returned 4
	[0059.553] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.558] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0059.558] lstrlenW (lpString="ACEODBCI.DLL") returned 12
	[0059.559] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0059.559] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=52656) returned 1
	[0059.559] CloseHandle (hObject=0x208) returned 1
	[0059.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll")) returned 0x20
	[0059.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.560] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0059.560] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.560] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.560] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0059.560] GetLastError () returned 0x0
	[0059.560] ReadFile (in: hFile=0x208, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0xcdb0, lpOverlapped=0x0) returned 1
	[0059.580] WriteFile (in: hFile=0x1ac, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xcdc0, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xcdc0, lpOverlapped=0x0) returned 1
	[0059.582] ReadFile (in: hFile=0x208, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0059.582] WriteFile (in: hFile=0x1ac, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0059.582] SetEndOfFile (hFile=0x1ac) returned 1
	[0059.582] CloseHandle (hObject=0x1ac) returned 1
	[0059.582] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.583] SetEndOfFile (hFile=0x208) returned 1
	[0059.584] CloseHandle (hObject=0x208) returned 1
	[0059.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0059.584] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll")) returned 1
	[0059.584] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL") returned 73
	[0059.584] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL") returned 73
	[0059.584] lstrlenW (lpString=".doc") returned 4
	[0059.584] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0059.584] lstrlenW (lpString=".docx") returned 5
	[0059.584] lstrcmpiW (lpString1=".docx", lpString2="I.DLL") returned -1
	[0059.584] lstrlenW (lpString=".pdf") returned 4
	[0059.585] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0059.585] lstrlenW (lpString=".xls") returned 4
	[0059.585] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0059.585] lstrlenW (lpString=".xlsx") returned 5
	[0059.585] lstrcmpiW (lpString1=".xlsx", lpString2="I.DLL") returned -1
	[0059.585] lstrlenW (lpString=".ppt") returned 4
	[0059.585] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0059.585] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL") returned 73
	[0059.585] lstrlenW (lpString=".zip") returned 4
	[0059.585] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0059.585] lstrlenW (lpString=".rar") returned 4
	[0059.585] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0059.585] lstrlenW (lpString=".bz2") returned 4
	[0059.585] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0059.585] lstrlenW (lpString=".7z") returned 3
	[0059.585] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.585] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL") returned 73
	[0059.585] lstrlenW (lpString=".dbf") returned 4
	[0059.585] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0059.585] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL") returned 73
	[0059.585] lstrlenW (lpString=".1cd") returned 4
	[0059.585] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0059.585] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL") returned 73
	[0059.585] lstrlenW (lpString=".jpg") returned 4
	[0059.585] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0059.585] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL") returned 73
	[0059.585] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL") returned 73
	[0059.585] lstrlenW (lpString=".doc") returned 4
	[0059.585] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0059.585] lstrlenW (lpString=".docx") returned 5
	[0059.585] lstrcmpiW (lpString1=".docx", lpString2="I.DLL") returned -1
	[0059.585] lstrlenW (lpString=".pdf") returned 4
	[0059.585] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0059.585] lstrlenW (lpString=".xls") returned 4
	[0059.586] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0059.586] lstrlenW (lpString=".xlsx") returned 5
	[0059.586] lstrcmpiW (lpString1=".xlsx", lpString2="I.DLL") returned -1
	[0059.586] lstrlenW (lpString=".ppt") returned 4
	[0059.586] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0059.586] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL") returned 73
	[0059.586] lstrlenW (lpString=".zip") returned 4
	[0059.586] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0059.586] lstrlenW (lpString=".rar") returned 4
	[0059.586] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0059.586] lstrlenW (lpString=".bz2") returned 4
	[0059.586] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0059.586] lstrlenW (lpString=".7z") returned 3
	[0059.586] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.586] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL") returned 73
	[0059.586] lstrlenW (lpString=".dbf") returned 4
	[0059.586] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0059.586] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL") returned 73
	[0059.586] lstrlenW (lpString=".1cd") returned 4
	[0059.586] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0059.586] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL") returned 73
	[0059.586] lstrlenW (lpString=".jpg") returned 4
	[0059.586] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0059.586] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0059.586] lstrlenW (lpString="ALRTINTL.DLL") returned 12
	[0059.586] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0059.587] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=154448) returned 1
	[0059.587] CloseHandle (hObject=0x208) returned 1
	[0059.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll")) returned 0x20
	[0059.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.587] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0059.587] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.587] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.587] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0059.588] GetLastError () returned 0x0
	[0059.588] ReadFile (in: hFile=0x208, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x25b50, lpOverlapped=0x0) returned 1
	[0059.617] WriteFile (in: hFile=0x1ac, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0x25b60, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0x25b60, lpOverlapped=0x0) returned 1
	[0059.620] ReadFile (in: hFile=0x208, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0059.620] WriteFile (in: hFile=0x1ac, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0059.621] SetEndOfFile (hFile=0x1ac) returned 1
	[0059.621] CloseHandle (hObject=0x1ac) returned 1
	[0059.621] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.621] SetEndOfFile (hFile=0x208) returned 1
	[0059.622] CloseHandle (hObject=0x208) returned 1
	[0059.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0059.623] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll")) returned 1
	[0059.623] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL") returned 73
	[0059.623] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL") returned 73
	[0059.623] lstrlenW (lpString=".doc") returned 4
	[0059.623] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0059.623] lstrlenW (lpString=".docx") returned 5
	[0059.623] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1
	[0059.623] lstrlenW (lpString=".pdf") returned 4
	[0059.623] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0059.623] lstrlenW (lpString=".xls") returned 4
	[0059.623] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0059.623] lstrlenW (lpString=".xlsx") returned 5
	[0059.623] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1
	[0059.623] lstrlenW (lpString=".ppt") returned 4
	[0059.623] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0059.623] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL") returned 73
	[0059.623] lstrlenW (lpString=".zip") returned 4
	[0059.623] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0059.623] lstrlenW (lpString=".rar") returned 4
	[0059.624] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0059.624] lstrlenW (lpString=".bz2") returned 4
	[0059.624] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0059.624] lstrlenW (lpString=".7z") returned 3
	[0059.624] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.624] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL") returned 73
	[0059.624] lstrlenW (lpString=".dbf") returned 4
	[0059.624] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0059.624] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL") returned 73
	[0059.624] lstrlenW (lpString=".1cd") returned 4
	[0059.624] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0059.624] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL") returned 73
	[0059.624] lstrlenW (lpString=".jpg") returned 4
	[0059.624] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0059.624] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL") returned 73
	[0059.624] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL") returned 73
	[0059.624] lstrlenW (lpString=".doc") returned 4
	[0059.624] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0059.624] lstrlenW (lpString=".docx") returned 5
	[0059.624] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1
	[0059.624] lstrlenW (lpString=".pdf") returned 4
	[0059.624] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0059.624] lstrlenW (lpString=".xls") returned 4
	[0059.624] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0059.624] lstrlenW (lpString=".xlsx") returned 5
	[0059.624] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1
	[0059.624] lstrlenW (lpString=".ppt") returned 4
	[0059.624] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0059.624] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL") returned 73
	[0059.624] lstrlenW (lpString=".zip") returned 4
	[0059.624] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0059.624] lstrlenW (lpString=".rar") returned 4
	[0059.625] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0059.625] lstrlenW (lpString=".bz2") returned 4
	[0059.625] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0059.625] lstrlenW (lpString=".7z") returned 3
	[0059.625] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL") returned 73
	[0059.625] lstrlenW (lpString=".dbf") returned 4
	[0059.625] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0059.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL") returned 73
	[0059.625] lstrlenW (lpString=".1cd") returned 4
	[0059.625] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0059.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL") returned 73
	[0059.625] lstrlenW (lpString=".jpg") returned 4
	[0059.625] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0059.625] lstrcmpiW (lpString1=".IDX_DLL", lpString2=".beets") returned 1
	[0059.625] lstrlenW (lpString="MSOINTL.DLL.IDX_DLL") returned 19
	[0059.625] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0059.626] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=55680) returned 1
	[0059.626] CloseHandle (hObject=0x208) returned 1
	[0059.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll")) returned 0x20
	[0059.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.626] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0059.626] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.626] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.626] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0059.626] GetLastError () returned 0x0
	[0059.626] ReadFile (in: hFile=0x208, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0xd980, lpOverlapped=0x0) returned 1
	[0059.633] WriteFile (in: hFile=0x1ac, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xd990, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xd990, lpOverlapped=0x0) returned 1
	[0059.634] ReadFile (in: hFile=0x208, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0059.635] WriteFile (in: hFile=0x1ac, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xfa, lpOverlapped=0x0) returned 1
	[0059.635] SetEndOfFile (hFile=0x1ac) returned 1
	[0059.635] CloseHandle (hObject=0x1ac) returned 1
	[0059.635] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.635] SetEndOfFile (hFile=0x208) returned 1
	[0059.636] CloseHandle (hObject=0x208) returned 1
	[0059.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0059.636] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll")) returned 1
	[0059.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL") returned 80
	[0059.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL") returned 80
	[0059.637] lstrlenW (lpString=".doc") returned 4
	[0059.637] lstrcmpiW (lpString1=".doc", lpString2="_DLL") returned -1
	[0059.637] lstrlenW (lpString=".docx") returned 5
	[0059.637] lstrcmpiW (lpString1=".docx", lpString2="X_DLL") returned -1
	[0059.637] lstrlenW (lpString=".pdf") returned 4
	[0059.637] lstrcmpiW (lpString1=".pdf", lpString2="_DLL") returned -1
	[0059.637] lstrlenW (lpString=".xls") returned 4
	[0059.637] lstrcmpiW (lpString1=".xls", lpString2="_DLL") returned -1
	[0059.637] lstrlenW (lpString=".xlsx") returned 5
	[0059.637] lstrcmpiW (lpString1=".xlsx", lpString2="X_DLL") returned -1
	[0059.637] lstrlenW (lpString=".ppt") returned 4
	[0059.637] lstrcmpiW (lpString1=".ppt", lpString2="_DLL") returned -1
	[0059.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL") returned 80
	[0059.637] lstrlenW (lpString=".zip") returned 4
	[0059.637] lstrcmpiW (lpString1=".zip", lpString2="_DLL") returned -1
	[0059.637] lstrlenW (lpString=".rar") returned 4
	[0059.637] lstrcmpiW (lpString1=".rar", lpString2="_DLL") returned -1
	[0059.637] lstrlenW (lpString=".bz2") returned 4
	[0059.637] lstrcmpiW (lpString1=".bz2", lpString2="_DLL") returned -1
	[0059.637] lstrlenW (lpString=".7z") returned 3
	[0059.637] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL") returned 80
	[0059.637] lstrlenW (lpString=".dbf") returned 4
	[0059.637] lstrcmpiW (lpString1=".dbf", lpString2="_DLL") returned -1
	[0059.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL") returned 80
	[0059.637] lstrlenW (lpString=".1cd") returned 4
	[0059.637] lstrcmpiW (lpString1=".1cd", lpString2="_DLL") returned -1
	[0059.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL") returned 80
	[0059.637] lstrlenW (lpString=".jpg") returned 4
	[0059.637] lstrcmpiW (lpString1=".jpg", lpString2="_DLL") returned -1
	[0059.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL") returned 80
	[0059.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL") returned 80
	[0059.638] lstrlenW (lpString=".doc") returned 4
	[0059.638] lstrcmpiW (lpString1=".doc", lpString2="_DLL") returned -1
	[0059.638] lstrlenW (lpString=".docx") returned 5
	[0059.638] lstrcmpiW (lpString1=".docx", lpString2="X_DLL") returned -1
	[0059.638] lstrlenW (lpString=".pdf") returned 4
	[0059.638] lstrcmpiW (lpString1=".pdf", lpString2="_DLL") returned -1
	[0059.638] lstrlenW (lpString=".xls") returned 4
	[0059.638] lstrcmpiW (lpString1=".xls", lpString2="_DLL") returned -1
	[0059.638] lstrlenW (lpString=".xlsx") returned 5
	[0059.638] lstrcmpiW (lpString1=".xlsx", lpString2="X_DLL") returned -1
	[0059.638] lstrlenW (lpString=".ppt") returned 4
	[0059.638] lstrcmpiW (lpString1=".ppt", lpString2="_DLL") returned -1
	[0059.638] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL") returned 80
	[0059.638] lstrlenW (lpString=".zip") returned 4
	[0059.638] lstrcmpiW (lpString1=".zip", lpString2="_DLL") returned -1
	[0059.638] lstrlenW (lpString=".rar") returned 4
	[0059.638] lstrcmpiW (lpString1=".rar", lpString2="_DLL") returned -1
	[0059.638] lstrlenW (lpString=".bz2") returned 4
	[0059.638] lstrcmpiW (lpString1=".bz2", lpString2="_DLL") returned -1
	[0059.638] lstrlenW (lpString=".7z") returned 3
	[0059.638] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.638] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL") returned 80
	[0059.638] lstrlenW (lpString=".dbf") returned 4
	[0059.638] lstrcmpiW (lpString1=".dbf", lpString2="_DLL") returned -1
	[0059.638] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL") returned 80
	[0059.638] lstrlenW (lpString=".1cd") returned 4
	[0059.638] lstrcmpiW (lpString1=".1cd", lpString2="_DLL") returned -1
	[0059.638] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL") returned 80
	[0059.638] lstrlenW (lpString=".jpg") returned 4
	[0059.638] lstrcmpiW (lpString1=".jpg", lpString2="_DLL") returned -1
	[0059.639] lstrcmpiW (lpString1=".IDX_DLL", lpString2=".beets") returned 1
	[0059.639] lstrlenW (lpString="MSOINTL.REST.IDX_DLL") returned 20
	[0059.639] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0059.639] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=1388416) returned 1
	[0059.639] CloseHandle (hObject=0x208) returned 1
	[0059.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll")) returned 0x20
	[0059.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.639] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0059.639] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.639] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.640] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0059.640] GetLastError () returned 0x0
	[0059.640] ReadFile (in: hFile=0x208, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0xffff0, lpOverlapped=0x0) returned 1
	[0060.508] WriteFile (in: hFile=0x1ac, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xffff0, lpOverlapped=0x0) returned 1
	[0060.528] ReadFile (in: hFile=0x208, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x52f90, lpOverlapped=0x0) returned 1
	[0060.656] WriteFile (in: hFile=0x1ac, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0x52fa0, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0x52fa0, lpOverlapped=0x0) returned 1
	[0060.665] ReadFile (in: hFile=0x208, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.665] WriteFile (in: hFile=0x1ac, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xfc, lpOverlapped=0x0) returned 1
	[0060.665] SetEndOfFile (hFile=0x1ac) returned 1
	[0060.665] CloseHandle (hObject=0x1ac) returned 1
	[0060.666] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.666] SetEndOfFile (hFile=0x208) returned 1
	[0060.669] CloseHandle (hObject=0x208) returned 1
	[0060.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.669] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll")) returned 1
	[0060.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL") returned 81
	[0060.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL") returned 81
	[0060.670] lstrlenW (lpString=".doc") returned 4
	[0060.670] lstrcmpiW (lpString1=".doc", lpString2="_DLL") returned -1
	[0060.670] lstrlenW (lpString=".docx") returned 5
	[0060.670] lstrcmpiW (lpString1=".docx", lpString2="X_DLL") returned -1
	[0060.670] lstrlenW (lpString=".pdf") returned 4
	[0060.670] lstrcmpiW (lpString1=".pdf", lpString2="_DLL") returned -1
	[0060.670] lstrlenW (lpString=".xls") returned 4
	[0060.670] lstrcmpiW (lpString1=".xls", lpString2="_DLL") returned -1
	[0060.670] lstrlenW (lpString=".xlsx") returned 5
	[0060.670] lstrcmpiW (lpString1=".xlsx", lpString2="X_DLL") returned -1
	[0060.670] lstrlenW (lpString=".ppt") returned 4
	[0060.670] lstrcmpiW (lpString1=".ppt", lpString2="_DLL") returned -1
	[0060.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL") returned 81
	[0060.670] lstrlenW (lpString=".zip") returned 4
	[0060.670] lstrcmpiW (lpString1=".zip", lpString2="_DLL") returned -1
	[0060.670] lstrlenW (lpString=".rar") returned 4
	[0060.670] lstrcmpiW (lpString1=".rar", lpString2="_DLL") returned -1
	[0060.670] lstrlenW (lpString=".bz2") returned 4
	[0060.670] lstrcmpiW (lpString1=".bz2", lpString2="_DLL") returned -1
	[0060.670] lstrlenW (lpString=".7z") returned 3
	[0060.670] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL") returned 81
	[0060.670] lstrlenW (lpString=".dbf") returned 4
	[0060.670] lstrcmpiW (lpString1=".dbf", lpString2="_DLL") returned -1
	[0060.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL") returned 81
	[0060.670] lstrlenW (lpString=".1cd") returned 4
	[0060.670] lstrcmpiW (lpString1=".1cd", lpString2="_DLL") returned -1
	[0060.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL") returned 81
	[0060.670] lstrlenW (lpString=".jpg") returned 4
	[0060.670] lstrcmpiW (lpString1=".jpg", lpString2="_DLL") returned -1
	[0060.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL") returned 81
	[0060.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL") returned 81
	[0060.670] lstrlenW (lpString=".doc") returned 4
	[0060.671] lstrcmpiW (lpString1=".doc", lpString2="_DLL") returned -1
	[0060.671] lstrlenW (lpString=".docx") returned 5
	[0060.671] lstrcmpiW (lpString1=".docx", lpString2="X_DLL") returned -1
	[0060.671] lstrlenW (lpString=".pdf") returned 4
	[0060.671] lstrcmpiW (lpString1=".pdf", lpString2="_DLL") returned -1
	[0060.671] lstrlenW (lpString=".xls") returned 4
	[0060.671] lstrcmpiW (lpString1=".xls", lpString2="_DLL") returned -1
	[0060.671] lstrlenW (lpString=".xlsx") returned 5
	[0060.671] lstrcmpiW (lpString1=".xlsx", lpString2="X_DLL") returned -1
	[0060.671] lstrlenW (lpString=".ppt") returned 4
	[0060.671] lstrcmpiW (lpString1=".ppt", lpString2="_DLL") returned -1
	[0060.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL") returned 81
	[0060.671] lstrlenW (lpString=".zip") returned 4
	[0060.671] lstrcmpiW (lpString1=".zip", lpString2="_DLL") returned -1
	[0060.671] lstrlenW (lpString=".rar") returned 4
	[0060.671] lstrcmpiW (lpString1=".rar", lpString2="_DLL") returned -1
	[0060.671] lstrlenW (lpString=".bz2") returned 4
	[0060.671] lstrcmpiW (lpString1=".bz2", lpString2="_DLL") returned -1
	[0060.671] lstrlenW (lpString=".7z") returned 3
	[0060.671] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL") returned 81
	[0060.671] lstrlenW (lpString=".dbf") returned 4
	[0060.671] lstrcmpiW (lpString1=".dbf", lpString2="_DLL") returned -1
	[0060.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL") returned 81
	[0060.671] lstrlenW (lpString=".1cd") returned 4
	[0060.671] lstrcmpiW (lpString1=".1cd", lpString2="_DLL") returned -1
	[0060.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL") returned 81
	[0060.671] lstrlenW (lpString=".jpg") returned 4
	[0060.671] lstrcmpiW (lpString1=".jpg", lpString2="_DLL") returned -1
	[0060.671] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0060.672] lstrlenW (lpString="ACEDAO.DLL") returned 10
	[0060.672] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0060.672] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=744888) returned 1
	[0060.672] CloseHandle (hObject=0x208) returned 1
	[0060.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll")) returned 0x20
	[0060.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0060.672] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0060.672] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.672] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.673] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0060.673] GetLastError () returned 0x0
	[0060.673] ReadFile (in: hFile=0x208, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0xb5db8, lpOverlapped=0x0) returned 1
	[0061.031] WriteFile (in: hFile=0x1ac, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xb5dc0, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xb5dc0, lpOverlapped=0x0) returned 1
	[0061.046] ReadFile (in: hFile=0x208, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.046] WriteFile (in: hFile=0x1ac, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0061.046] SetEndOfFile (hFile=0x1ac) returned 1
	[0061.047] CloseHandle (hObject=0x1ac) returned 1
	[0061.047] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.047] SetEndOfFile (hFile=0x208) returned 1
	[0061.053] CloseHandle (hObject=0x208) returned 1
	[0061.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.054] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll")) returned 1
	[0061.054] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL") returned 66
	[0061.054] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL") returned 66
	[0061.054] lstrlenW (lpString=".doc") returned 4
	[0061.054] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0061.054] lstrlenW (lpString=".docx") returned 5
	[0061.054] lstrcmpiW (lpString1=".docx", lpString2="O.DLL") returned -1
	[0061.054] lstrlenW (lpString=".pdf") returned 4
	[0061.054] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0061.054] lstrlenW (lpString=".xls") returned 4
	[0061.054] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0061.054] lstrlenW (lpString=".xlsx") returned 5
	[0061.054] lstrcmpiW (lpString1=".xlsx", lpString2="O.DLL") returned -1
	[0061.054] lstrlenW (lpString=".ppt") returned 4
	[0061.054] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0061.054] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL") returned 66
	[0061.054] lstrlenW (lpString=".zip") returned 4
	[0061.054] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0061.054] lstrlenW (lpString=".rar") returned 4
	[0061.054] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0061.054] lstrlenW (lpString=".bz2") returned 4
	[0061.054] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0061.054] lstrlenW (lpString=".7z") returned 3
	[0061.055] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0061.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL") returned 66
	[0061.055] lstrlenW (lpString=".dbf") returned 4
	[0061.055] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0061.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL") returned 66
	[0061.055] lstrlenW (lpString=".1cd") returned 4
	[0061.055] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0061.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL") returned 66
	[0061.055] lstrlenW (lpString=".jpg") returned 4
	[0061.055] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0061.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL") returned 66
	[0061.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL") returned 66
	[0061.055] lstrlenW (lpString=".doc") returned 4
	[0061.055] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0061.055] lstrlenW (lpString=".docx") returned 5
	[0061.055] lstrcmpiW (lpString1=".docx", lpString2="O.DLL") returned -1
	[0061.055] lstrlenW (lpString=".pdf") returned 4
	[0061.055] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0061.055] lstrlenW (lpString=".xls") returned 4
	[0061.055] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0061.055] lstrlenW (lpString=".xlsx") returned 5
	[0061.055] lstrcmpiW (lpString1=".xlsx", lpString2="O.DLL") returned -1
	[0061.055] lstrlenW (lpString=".ppt") returned 4
	[0061.055] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0061.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL") returned 66
	[0061.055] lstrlenW (lpString=".zip") returned 4
	[0061.055] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0061.055] lstrlenW (lpString=".rar") returned 4
	[0061.055] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0061.055] lstrlenW (lpString=".bz2") returned 4
	[0061.055] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0061.055] lstrlenW (lpString=".7z") returned 3
	[0061.056] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0061.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL") returned 66
	[0061.056] lstrlenW (lpString=".dbf") returned 4
	[0061.056] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0061.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL") returned 66
	[0061.056] lstrlenW (lpString=".1cd") returned 4
	[0061.056] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0061.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL") returned 66
	[0061.056] lstrlenW (lpString=".jpg") returned 4
	[0061.056] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0061.056] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0061.056] lstrlenW (lpString="ACEODEXL.DLL") returned 12
	[0061.056] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0062.880] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=15800) returned 1
	[0062.880] CloseHandle (hObject=0x1b8) returned 1
	[0062.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll")) returned 0x20
	[0062.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0063.421] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0063.422] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.422] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.422] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0063.691] GetLastError () returned 0x0
	[0063.691] ReadFile (in: hFile=0x1e8, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x3db8, lpOverlapped=0x0) returned 1
	[0063.758] WriteFile (in: hFile=0x22c, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0x3dc0, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0x3dc0, lpOverlapped=0x0) returned 1
	[0063.760] ReadFile (in: hFile=0x1e8, lpBuffer=0x8920020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x7edfed4, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesRead=0x7edfed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.760] WriteFile (in: hFile=0x22c, lpBuffer=0x8920020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x7edfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8920020*, lpNumberOfBytesWritten=0x7edfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.760] SetEndOfFile (hFile=0x22c) returned 1
	[0063.760] CloseHandle (hObject=0x22c) returned 1
	[0063.760] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.760] SetEndOfFile (hFile=0x1e8) returned 1
	[0063.761] CloseHandle (hObject=0x1e8) returned 1
	[0063.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.761] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll")) returned 1
	[0063.762] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL") returned 68
	[0063.762] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL") returned 68
	[0063.762] lstrlenW (lpString=".doc") returned 4
	[0063.762] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0063.762] lstrlenW (lpString=".docx") returned 5
	[0063.762] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1
	[0063.762] lstrlenW (lpString=".pdf") returned 4
	[0063.762] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0063.762] lstrlenW (lpString=".xls") returned 4
	[0063.762] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0063.762] lstrlenW (lpString=".xlsx") returned 5
	[0063.762] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1
	[0063.762] lstrlenW (lpString=".ppt") returned 4
	[0063.762] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0063.762] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL") returned 68
	[0063.762] lstrlenW (lpString=".zip") returned 4
	[0063.762] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0063.762] lstrlenW (lpString=".rar") returned 4
	[0063.762] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0063.762] lstrlenW (lpString=".bz2") returned 4
	[0063.762] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0063.762] lstrlenW (lpString=".7z") returned 3
	[0063.762] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0063.762] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL") returned 68
	[0063.762] lstrlenW (lpString=".dbf") returned 4
	[0063.762] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0063.762] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL") returned 68
	[0063.762] lstrlenW (lpString=".1cd") returned 4
	[0063.763] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0063.763] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL") returned 68
	[0063.763] lstrlenW (lpString=".jpg") returned 4
	[0063.763] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0063.763] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL") returned 68
	[0063.763] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL") returned 68
	[0063.763] lstrlenW (lpString=".doc") returned 4
	[0063.763] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0063.763] lstrlenW (lpString=".docx") returned 5
	[0063.763] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1
	[0063.763] lstrlenW (lpString=".pdf") returned 4
	[0063.763] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0063.763] lstrlenW (lpString=".xls") returned 4
	[0063.763] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0063.763] lstrlenW (lpString=".xlsx") returned 5
	[0063.763] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1
	[0063.763] lstrlenW (lpString=".ppt") returned 4
	[0063.763] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0063.763] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL") returned 68
	[0063.763] lstrlenW (lpString=".zip") returned 4
	[0063.763] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0063.763] lstrlenW (lpString=".rar") returned 4
	[0063.763] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0063.763] lstrlenW (lpString=".bz2") returned 4
	[0063.763] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0063.763] lstrlenW (lpString=".7z") returned 3
	[0063.763] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0063.763] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL") returned 68
	[0063.763] lstrlenW (lpString=".dbf") returned 4
	[0063.763] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0063.763] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL") returned 68
	[0063.764] lstrlenW (lpString=".1cd") returned 4
	[0063.764] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0063.764] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL") returned 68
	[0063.764] lstrlenW (lpString=".jpg") returned 4
	[0063.764] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0063.764] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0063.764] lstrlenW (lpString="ATLCONV.DLL") returned 11
	[0063.764] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0063.776] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x7edff1c | out: lpFileSize=0x7edff1c*=385368) returned 1
	[0063.776] CloseHandle (hObject=0x210) returned 1
	[0063.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll")) returned 0x20
	[0063.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0063.777] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0063.777] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.777] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x7edfec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.777] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) 

Thread:
	id = 16
	os_tid = 0xa50

	[0035.835] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x81e00a0
	[0035.835] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x81f00a8
	[0035.835] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0aa0
	[0035.835] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x6) returned 0x53dd708
	[0035.836] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0ab8
	[0035.836] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x100000) returned 0x8a30020
	[0035.836] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0ad0
	[0035.836] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0ad0, Size=0x20) returned 0x53e70b0
	[0035.836] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0ad0
	[0035.836] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0ad0, Size=0x20) returned 0x53e7088
	[0035.836] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0035.836] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0035.836] Wow64DisableWow64FsRedirection (in: OldValue=0x812ff58 | out: OldValue=0x812ff58*=0x0) returned 1
	[0035.836] lstrlenW (lpString="kernel32.dll") returned 12
	[0035.836] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e70b0 | out: hHeap=0x5350000) returned 1
	[0035.836] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0035.836] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e7088 | out: hHeap=0x5350000) returned 1
	[0035.837] Sleep (dwMilliseconds=0x64) 
	[0036.181] lstrcmpiW (lpString1=".ttf", lpString2=".beets") returned 1
	[0036.181] lstrlenW (lpString="jpn_boot.ttf") returned 12
	[0036.181] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0036.722] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=1984228) returned 1
	[0036.723] CloseHandle (hObject=0x198) returned 1
	[0036.723] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20
	[0036.723] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.723] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0036.723] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0036.723] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0036.723] lstrlenW (lpString=".doc") returned 4
	[0036.723] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0036.723] lstrlenW (lpString=".docx") returned 5
	[0036.723] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0036.723] lstrlenW (lpString=".pdf") returned 4
	[0036.723] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0036.723] lstrlenW (lpString=".xls") returned 4
	[0036.723] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0036.723] lstrlenW (lpString=".xlsx") returned 5
	[0036.723] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0036.723] lstrlenW (lpString=".ppt") returned 4
	[0036.723] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0036.723] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0036.723] lstrlenW (lpString=".zip") returned 4
	[0036.723] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0036.723] lstrlenW (lpString=".rar") returned 4
	[0036.723] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0036.723] lstrlenW (lpString=".bz2") returned 4
	[0036.723] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0036.723] lstrlenW (lpString=".7z") returned 3
	[0036.724] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0036.724] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0036.724] lstrlenW (lpString=".dbf") returned 4
	[0036.724] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0036.724] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0036.724] lstrlenW (lpString=".1cd") returned 4
	[0036.724] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0036.724] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0036.724] lstrlenW (lpString=".jpg") returned 4
	[0036.724] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0036.724] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0036.724] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0036.724] lstrlenW (lpString=".doc") returned 4
	[0036.724] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0036.724] lstrlenW (lpString=".docx") returned 5
	[0036.724] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0036.724] lstrlenW (lpString=".pdf") returned 4
	[0036.724] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0036.724] lstrlenW (lpString=".xls") returned 4
	[0036.724] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0036.724] lstrlenW (lpString=".xlsx") returned 5
	[0036.724] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0036.724] lstrlenW (lpString=".ppt") returned 4
	[0036.724] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0036.724] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0036.724] lstrlenW (lpString=".zip") returned 4
	[0036.724] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0036.724] lstrlenW (lpString=".rar") returned 4
	[0036.724] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0036.724] lstrlenW (lpString=".bz2") returned 4
	[0036.724] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0036.724] lstrlenW (lpString=".7z") returned 3
	[0036.725] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0036.725] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0036.725] lstrlenW (lpString=".dbf") returned 4
	[0036.725] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0036.725] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0036.725] lstrlenW (lpString=".1cd") returned 4
	[0036.725] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0036.725] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0036.725] lstrlenW (lpString=".jpg") returned 4
	[0036.725] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0036.725] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0036.725] lstrlenW (lpString="PptLR.cab") returned 9
	[0036.725] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0037.357] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=70361744) returned 1
	[0037.363] CloseHandle (hObject=0x1d8) returned 1
	[0037.377] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab")) returned 0x2020
	[0037.390] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0037.391] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0037.391] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0037.391] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0037.391] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0037.391] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0037.507] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x165e0da, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0037.507] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0037.606] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0037.606] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x42da290, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0037.606] ReadFile (in: hFile=0x1dc, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0037.860] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.860] WriteFile (in: hFile=0x1dc, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc00fe, lpOverlapped=0x0) returned 1
	[0037.926] SetEndOfFile (hFile=0x1dc) returned 1
	[0037.926] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d3d110
	[0037.930] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0037.930] WriteFile (in: hFile=0x1dc, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0037.931] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x165e0da, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0037.931] WriteFile (in: hFile=0x1dc, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0037.932] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x42da290, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0037.932] WriteFile (in: hFile=0x1dc, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0037.934] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d3d110 | out: hHeap=0x5350000) returned 1
	[0037.934] CloseHandle (hObject=0x1dc) returned 1
	[0041.181] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0041.181] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72
	[0041.181] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72
	[0041.181] lstrlenW (lpString=".doc") returned 4
	[0041.181] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0041.181] lstrlenW (lpString=".docx") returned 5
	[0041.181] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0041.181] lstrlenW (lpString=".pdf") returned 4
	[0041.181] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0041.181] lstrlenW (lpString=".xls") returned 4
	[0041.181] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0041.181] lstrlenW (lpString=".xlsx") returned 5
	[0041.181] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0041.181] lstrlenW (lpString=".ppt") returned 4
	[0041.181] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0041.181] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72
	[0041.182] lstrlenW (lpString=".zip") returned 4
	[0041.182] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0041.182] lstrlenW (lpString=".rar") returned 4
	[0041.182] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0041.182] lstrlenW (lpString=".bz2") returned 4
	[0041.182] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0041.182] lstrlenW (lpString=".7z") returned 3
	[0041.182] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0041.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72
	[0041.182] lstrlenW (lpString=".dbf") returned 4
	[0041.182] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0041.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72
	[0041.182] lstrlenW (lpString=".1cd") returned 4
	[0041.182] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0041.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72
	[0041.182] lstrlenW (lpString=".jpg") returned 4
	[0041.182] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0041.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72
	[0041.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72
	[0041.182] lstrlenW (lpString=".doc") returned 4
	[0041.182] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0041.182] lstrlenW (lpString=".docx") returned 5
	[0041.182] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0041.182] lstrlenW (lpString=".pdf") returned 4
	[0041.182] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0041.182] lstrlenW (lpString=".xls") returned 4
	[0041.182] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0041.182] lstrlenW (lpString=".xlsx") returned 5
	[0041.182] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0041.182] lstrlenW (lpString=".ppt") returned 4
	[0041.182] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0041.182] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72
	[0041.182] lstrlenW (lpString=".zip") returned 4
	[0041.183] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0041.183] lstrlenW (lpString=".rar") returned 4
	[0041.183] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0041.183] lstrlenW (lpString=".bz2") returned 4
	[0041.183] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0041.183] lstrlenW (lpString=".7z") returned 3
	[0041.183] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0041.183] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72
	[0041.183] lstrlenW (lpString=".dbf") returned 4
	[0041.183] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0041.183] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72
	[0041.183] lstrlenW (lpString=".1cd") returned 4
	[0041.183] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0041.183] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 72
	[0041.183] lstrlenW (lpString=".jpg") returned 4
	[0041.183] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0041.183] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0041.183] lstrlenW (lpString="WordLR.cab") returned 10
	[0041.183] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0041.183] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=43806141) returned 1
	[0041.184] CloseHandle (hObject=0x1dc) returned 1
	[0041.184] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab")) returned 0x2020
	[0041.184] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.184] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0041.184] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0041.184] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0041.184] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0041.184] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0041.287] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xdecf3f, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0041.288] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0041.293] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0041.293] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x2986dbd, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0041.293] ReadFile (in: hFile=0x1dc, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0041.309] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.309] WriteFile (in: hFile=0x1dc, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc0100, lpOverlapped=0x0) returned 1
	[0041.693] SetEndOfFile (hFile=0x1dc) returned 1
	[0041.694] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d5d120
	[0041.697] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0041.698] WriteFile (in: hFile=0x1dc, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0041.698] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xdecf3f, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0041.698] WriteFile (in: hFile=0x1dc, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0041.701] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x2986dbd, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0041.701] WriteFile (in: hFile=0x1dc, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0041.703] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d5d120 | out: hHeap=0x5350000) returned 1
	[0041.703] CloseHandle (hObject=0x1dc) returned 1
	[0043.202] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0043.202] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0043.202] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0043.202] lstrlenW (lpString=".doc") returned 4
	[0043.202] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0043.202] lstrlenW (lpString=".docx") returned 5
	[0043.202] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0043.202] lstrlenW (lpString=".pdf") returned 4
	[0043.202] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0043.202] lstrlenW (lpString=".xls") returned 4
	[0043.202] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0043.202] lstrlenW (lpString=".xlsx") returned 5
	[0043.202] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0043.202] lstrlenW (lpString=".ppt") returned 4
	[0043.202] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0043.203] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0043.203] lstrlenW (lpString=".zip") returned 4
	[0043.203] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0043.203] lstrlenW (lpString=".rar") returned 4
	[0043.203] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0043.203] lstrlenW (lpString=".bz2") returned 4
	[0043.203] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0043.203] lstrlenW (lpString=".7z") returned 3
	[0043.203] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0043.203] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0043.203] lstrlenW (lpString=".dbf") returned 4
	[0043.203] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0043.203] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0043.203] lstrlenW (lpString=".1cd") returned 4
	[0043.203] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0043.203] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0043.203] lstrlenW (lpString=".jpg") returned 4
	[0043.203] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0043.203] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0043.203] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0043.203] lstrlenW (lpString=".doc") returned 4
	[0043.203] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0043.203] lstrlenW (lpString=".docx") returned 5
	[0043.203] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0043.203] lstrlenW (lpString=".pdf") returned 4
	[0043.203] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0043.203] lstrlenW (lpString=".xls") returned 4
	[0043.203] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0043.203] lstrlenW (lpString=".xlsx") returned 5
	[0043.203] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0043.203] lstrlenW (lpString=".ppt") returned 4
	[0043.203] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0043.204] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0043.204] lstrlenW (lpString=".zip") returned 4
	[0043.204] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0043.204] lstrlenW (lpString=".rar") returned 4
	[0043.204] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0043.204] lstrlenW (lpString=".bz2") returned 4
	[0043.204] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0043.204] lstrlenW (lpString=".7z") returned 3
	[0043.204] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0043.204] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0043.204] lstrlenW (lpString=".dbf") returned 4
	[0043.204] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0043.204] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0043.204] lstrlenW (lpString=".1cd") returned 4
	[0043.204] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0043.204] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 73
	[0043.204] lstrlenW (lpString=".jpg") returned 4
	[0043.205] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0043.205] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0043.205] lstrlenW (lpString="Proof.cab") returned 9
	[0043.205] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0043.205] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=21064532) returned 1
	[0043.205] CloseHandle (hObject=0x1dc) returned 1
	[0043.205] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab")) returned 0x2020
	[0043.205] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0043.205] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0043.359] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0043.359] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0043.359] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0043.359] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0043.362] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x6b23c6, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0043.363] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0043.366] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0043.366] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x13d6b54, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0043.366] ReadFile (in: hFile=0x1dc, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0043.531] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.531] WriteFile (in: hFile=0x1dc, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc00fe, lpOverlapped=0x0) returned 1
	[0043.544] SetEndOfFile (hFile=0x1dc) returned 1
	[0043.544] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8dcd140
	[0043.548] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0043.548] WriteFile (in: hFile=0x1dc, lpBuffer=0x8dcd140*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8dcd140*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0043.551] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x6b23c6, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0043.551] WriteFile (in: hFile=0x1dc, lpBuffer=0x8dcd140*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8dcd140*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0043.552] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x13d6b54, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0043.552] WriteFile (in: hFile=0x1dc, lpBuffer=0x8dcd140*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8dcd140*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0043.553] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8dcd140 | out: hHeap=0x5350000) returned 1
	[0043.553] CloseHandle (hObject=0x1dc) returned 1
	[0046.979] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0046.980] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0046.980] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0046.980] lstrlenW (lpString=".doc") returned 4
	[0046.980] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0046.980] lstrlenW (lpString=".docx") returned 5
	[0046.980] lstrcmpiW (lpString1=".docx", lpString2="f.cab") returned -1
	[0046.980] lstrlenW (lpString=".pdf") returned 4
	[0046.980] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0046.980] lstrlenW (lpString=".xls") returned 4
	[0046.980] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0046.980] lstrlenW (lpString=".xlsx") returned 5
	[0046.980] lstrcmpiW (lpString1=".xlsx", lpString2="f.cab") returned -1
	[0046.980] lstrlenW (lpString=".ppt") returned 4
	[0046.980] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0046.980] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0046.980] lstrlenW (lpString=".zip") returned 4
	[0046.980] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0046.980] lstrlenW (lpString=".rar") returned 4
	[0046.980] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0046.980] lstrlenW (lpString=".bz2") returned 4
	[0046.980] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0046.980] lstrlenW (lpString=".7z") returned 3
	[0046.980] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0046.980] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0046.980] lstrlenW (lpString=".dbf") returned 4
	[0046.980] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0046.980] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0046.980] lstrlenW (lpString=".1cd") returned 4
	[0046.980] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0046.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0046.981] lstrlenW (lpString=".jpg") returned 4
	[0046.981] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0046.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0046.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0046.981] lstrlenW (lpString=".doc") returned 4
	[0046.981] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0046.981] lstrlenW (lpString=".docx") returned 5
	[0046.981] lstrcmpiW (lpString1=".docx", lpString2="f.cab") returned -1
	[0046.981] lstrlenW (lpString=".pdf") returned 4
	[0046.981] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0046.981] lstrlenW (lpString=".xls") returned 4
	[0046.981] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0046.981] lstrlenW (lpString=".xlsx") returned 5
	[0046.981] lstrcmpiW (lpString1=".xlsx", lpString2="f.cab") returned -1
	[0046.981] lstrlenW (lpString=".ppt") returned 4
	[0046.981] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0046.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0046.981] lstrlenW (lpString=".zip") returned 4
	[0046.981] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0046.981] lstrlenW (lpString=".rar") returned 4
	[0046.981] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0046.981] lstrlenW (lpString=".bz2") returned 4
	[0046.981] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0046.981] lstrlenW (lpString=".7z") returned 3
	[0046.981] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0046.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0046.981] lstrlenW (lpString=".dbf") returned 4
	[0046.981] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0046.981] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0046.981] lstrlenW (lpString=".1cd") returned 4
	[0046.981] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0046.982] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 81
	[0046.982] lstrlenW (lpString=".jpg") returned 4
	[0046.982] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0046.982] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0046.982] lstrlenW (lpString="InfoPathMUI.msi") returned 15
	[0046.982] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0046.982] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=3124224) returned 1
	[0046.982] CloseHandle (hObject=0x1dc) returned 1
	[0046.982] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi")) returned 0x2020
	[0046.982] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.982] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0046.983] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0046.983] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0046.983] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0046.983] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0046.986] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xfe400, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0046.986] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0046.996] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0046.996] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x2bac00, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0046.996] ReadFile (in: hFile=0x1dc, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.011] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.011] WriteFile (in: hFile=0x1dc, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc010a, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc010a, lpOverlapped=0x0) returned 1
	[0047.387] SetEndOfFile (hFile=0x1dc) returned 1
	[0047.388] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d6d110
	[0047.392] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.392] WriteFile (in: hFile=0x1dc, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.394] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xfe400, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.394] WriteFile (in: hFile=0x1dc, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.398] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x2bac00, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.398] WriteFile (in: hFile=0x1dc, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.400] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d6d110 | out: hHeap=0x5350000) returned 1
	[0047.401] CloseHandle (hObject=0x1dc) returned 1
	[0047.401] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0047.401] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78
	[0047.401] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78
	[0047.401] lstrlenW (lpString=".doc") returned 4
	[0047.401] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0047.401] lstrlenW (lpString=".docx") returned 5
	[0047.401] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0047.401] lstrlenW (lpString=".pdf") returned 4
	[0047.401] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0047.401] lstrlenW (lpString=".xls") returned 4
	[0047.401] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0047.401] lstrlenW (lpString=".xlsx") returned 5
	[0047.401] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0047.401] lstrlenW (lpString=".ppt") returned 4
	[0047.401] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0047.401] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78
	[0047.401] lstrlenW (lpString=".zip") returned 4
	[0047.401] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0047.401] lstrlenW (lpString=".rar") returned 4
	[0047.402] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0047.402] lstrlenW (lpString=".bz2") returned 4
	[0047.402] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0047.402] lstrlenW (lpString=".7z") returned 3
	[0047.402] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0047.402] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78
	[0047.402] lstrlenW (lpString=".dbf") returned 4
	[0047.402] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0047.402] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78
	[0047.402] lstrlenW (lpString=".1cd") returned 4
	[0047.402] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0047.402] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78
	[0047.402] lstrlenW (lpString=".jpg") returned 4
	[0047.402] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0047.402] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78
	[0047.402] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78
	[0047.402] lstrlenW (lpString=".doc") returned 4
	[0047.402] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0047.402] lstrlenW (lpString=".docx") returned 5
	[0047.402] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0047.402] lstrlenW (lpString=".pdf") returned 4
	[0047.402] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0047.402] lstrlenW (lpString=".xls") returned 4
	[0047.402] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0047.402] lstrlenW (lpString=".xlsx") returned 5
	[0047.402] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0047.402] lstrlenW (lpString=".ppt") returned 4
	[0047.402] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0047.402] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78
	[0047.402] lstrlenW (lpString=".zip") returned 4
	[0047.402] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0047.402] lstrlenW (lpString=".rar") returned 4
	[0047.403] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0047.403] lstrlenW (lpString=".bz2") returned 4
	[0047.403] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0047.403] lstrlenW (lpString=".7z") returned 3
	[0047.403] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0047.403] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78
	[0047.403] lstrlenW (lpString=".dbf") returned 4
	[0047.403] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0047.403] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78
	[0047.403] lstrlenW (lpString=".1cd") returned 4
	[0047.403] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0047.403] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 78
	[0047.403] lstrlenW (lpString=".jpg") returned 4
	[0047.403] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0047.403] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0047.403] lstrlenW (lpString="OneNoteMUI.msi") returned 14
	[0047.403] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0047.403] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=2503680) returned 1
	[0047.403] CloseHandle (hObject=0x1dc) returned 1
	[0047.404] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi")) returned 0x2020
	[0047.404] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.404] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0047.404] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0047.404] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0047.405] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.405] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.407] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.407] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.418] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0047.418] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.418] ReadFile (in: hFile=0x1dc, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.588] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.588] WriteFile (in: hFile=0x1dc, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc0108, lpOverlapped=0x0) returned 1
	[0047.609] SetEndOfFile (hFile=0x1dc) returned 1
	[0047.609] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8cb50d8
	[0047.609] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.609] WriteFile (in: hFile=0x1dc, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.610] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.611] WriteFile (in: hFile=0x1dc, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.616] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.616] WriteFile (in: hFile=0x1dc, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.789] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb50d8 | out: hHeap=0x5350000) returned 1
	[0047.906] CloseHandle (hObject=0x1dc) returned 1
	[0047.907] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0047.907] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0047.907] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0047.907] lstrlenW (lpString=".doc") returned 4
	[0047.907] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0047.907] lstrlenW (lpString=".docx") returned 5
	[0047.907] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0047.907] lstrlenW (lpString=".pdf") returned 4
	[0047.907] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0047.907] lstrlenW (lpString=".xls") returned 4
	[0047.907] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0047.907] lstrlenW (lpString=".xlsx") returned 5
	[0047.907] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0047.907] lstrlenW (lpString=".ppt") returned 4
	[0047.907] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0047.907] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0047.907] lstrlenW (lpString=".zip") returned 4
	[0047.907] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0047.907] lstrlenW (lpString=".rar") returned 4
	[0047.907] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0047.907] lstrlenW (lpString=".bz2") returned 4
	[0047.907] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0047.907] lstrlenW (lpString=".7z") returned 3
	[0047.907] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0047.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0047.908] lstrlenW (lpString=".dbf") returned 4
	[0047.908] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0047.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0047.908] lstrlenW (lpString=".1cd") returned 4
	[0047.908] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0047.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0047.908] lstrlenW (lpString=".jpg") returned 4
	[0047.908] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0047.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0047.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0047.908] lstrlenW (lpString=".doc") returned 4
	[0047.908] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0047.908] lstrlenW (lpString=".docx") returned 5
	[0047.908] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0047.908] lstrlenW (lpString=".pdf") returned 4
	[0047.908] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0047.908] lstrlenW (lpString=".xls") returned 4
	[0047.908] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0047.908] lstrlenW (lpString=".xlsx") returned 5
	[0047.908] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0047.908] lstrlenW (lpString=".ppt") returned 4
	[0047.908] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0047.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0047.908] lstrlenW (lpString=".zip") returned 4
	[0047.908] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0047.908] lstrlenW (lpString=".rar") returned 4
	[0047.908] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0047.908] lstrlenW (lpString=".bz2") returned 4
	[0047.908] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0047.908] lstrlenW (lpString=".7z") returned 3
	[0047.908] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0047.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0047.909] lstrlenW (lpString=".dbf") returned 4
	[0047.909] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0047.909] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0047.909] lstrlenW (lpString=".1cd") returned 4
	[0047.909] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0047.909] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 77
	[0047.909] lstrlenW (lpString=".jpg") returned 4
	[0047.909] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0047.909] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0047.909] lstrlenW (lpString="dwintl20.dll") returned 12
	[0047.909] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0047.909] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=107912) returned 1
	[0047.909] CloseHandle (hObject=0x1dc) returned 1
	[0047.909] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll")) returned 0x2020
	[0047.910] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.910] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0047.910] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.910] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.910] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0047.963] GetLastError () returned 0x0
	[0047.963] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x1a588, lpOverlapped=0x0) returned 1
	[0047.971] WriteFile (in: hFile=0x218, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x1a590, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x1a590, lpOverlapped=0x0) returned 1
	[0047.974] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0047.974] WriteFile (in: hFile=0x218, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0047.975] SetEndOfFile (hFile=0x218) returned 1
	[0047.975] CloseHandle (hObject=0x218) returned 1
	[0047.975] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.975] SetEndOfFile (hFile=0x1dc) returned 1
	[0047.977] CloseHandle (hObject=0x1dc) returned 1
	[0047.977] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0047.977] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll")) returned 1
	[0047.977] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80
	[0047.977] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80
	[0047.978] lstrlenW (lpString=".doc") returned 4
	[0047.978] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0047.978] lstrlenW (lpString=".docx") returned 5
	[0047.978] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0047.978] lstrlenW (lpString=".pdf") returned 4
	[0047.978] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0047.978] lstrlenW (lpString=".xls") returned 4
	[0047.978] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0047.978] lstrlenW (lpString=".xlsx") returned 5
	[0047.978] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0047.978] lstrlenW (lpString=".ppt") returned 4
	[0047.978] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0047.978] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80
	[0047.978] lstrlenW (lpString=".zip") returned 4
	[0047.978] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0047.978] lstrlenW (lpString=".rar") returned 4
	[0047.978] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0047.978] lstrlenW (lpString=".bz2") returned 4
	[0047.978] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0047.978] lstrlenW (lpString=".7z") returned 3
	[0047.978] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0047.978] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80
	[0047.978] lstrlenW (lpString=".dbf") returned 4
	[0047.978] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0047.978] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80
	[0047.979] lstrlenW (lpString=".1cd") returned 4
	[0047.979] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0047.979] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80
	[0047.979] lstrlenW (lpString=".jpg") returned 4
	[0047.979] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0047.979] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80
	[0047.979] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80
	[0047.979] lstrlenW (lpString=".doc") returned 4
	[0047.979] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0047.979] lstrlenW (lpString=".docx") returned 5
	[0047.979] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0047.979] lstrlenW (lpString=".pdf") returned 4
	[0047.979] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0047.979] lstrlenW (lpString=".xls") returned 4
	[0047.979] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0047.979] lstrlenW (lpString=".xlsx") returned 5
	[0047.979] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0047.979] lstrlenW (lpString=".ppt") returned 4
	[0047.979] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0047.979] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80
	[0047.979] lstrlenW (lpString=".zip") returned 4
	[0047.979] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0047.979] lstrlenW (lpString=".rar") returned 4
	[0047.979] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0047.979] lstrlenW (lpString=".bz2") returned 4
	[0047.980] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0047.980] lstrlenW (lpString=".7z") returned 3
	[0047.980] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0047.980] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80
	[0047.980] lstrlenW (lpString=".dbf") returned 4
	[0047.980] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0047.980] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80
	[0047.980] lstrlenW (lpString=".1cd") returned 4
	[0047.980] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0047.980] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 80
	[0047.980] lstrlenW (lpString=".jpg") returned 4
	[0047.980] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0047.980] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0047.980] lstrlenW (lpString="dwdcw20.dll") returned 11
	[0047.980] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0047.981] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=526176) returned 1
	[0047.981] CloseHandle (hObject=0x1dc) returned 1
	[0047.981] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll")) returned 0x2020
	[0047.981] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.981] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0047.981] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.981] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.981] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0047.982] GetLastError () returned 0x0
	[0047.982] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x80760, lpOverlapped=0x0) returned 1
	[0047.998] WriteFile (in: hFile=0x218, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x80770, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x80770, lpOverlapped=0x0) returned 1
	[0048.241] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.241] WriteFile (in: hFile=0x218, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0048.241] SetEndOfFile (hFile=0x218) returned 1
	[0048.365] CloseHandle (hObject=0x218) returned 1
	[0048.365] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.365] SetEndOfFile (hFile=0x1dc) returned 1
	[0048.370] CloseHandle (hObject=0x1dc) returned 1
	[0048.371] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0048.371] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll")) returned 1
	[0048.482] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74
	[0048.482] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74
	[0048.482] lstrlenW (lpString=".doc") returned 4
	[0048.482] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0048.482] lstrlenW (lpString=".docx") returned 5
	[0048.482] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0048.482] lstrlenW (lpString=".pdf") returned 4
	[0048.482] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0048.482] lstrlenW (lpString=".xls") returned 4
	[0048.482] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0048.482] lstrlenW (lpString=".xlsx") returned 5
	[0048.482] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0048.482] lstrlenW (lpString=".ppt") returned 4
	[0048.482] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0048.482] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74
	[0048.482] lstrlenW (lpString=".zip") returned 4
	[0048.482] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0048.482] lstrlenW (lpString=".rar") returned 4
	[0048.482] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0048.483] lstrlenW (lpString=".bz2") returned 4
	[0048.483] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0048.483] lstrlenW (lpString=".7z") returned 3
	[0048.483] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0048.483] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74
	[0048.483] lstrlenW (lpString=".dbf") returned 4
	[0048.483] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0048.483] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74
	[0048.483] lstrlenW (lpString=".1cd") returned 4
	[0048.483] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0048.483] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74
	[0048.483] lstrlenW (lpString=".jpg") returned 4
	[0048.483] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0048.483] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74
	[0048.483] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74
	[0048.483] lstrlenW (lpString=".doc") returned 4
	[0048.483] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0048.483] lstrlenW (lpString=".docx") returned 5
	[0048.483] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0048.483] lstrlenW (lpString=".pdf") returned 4
	[0048.483] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0048.483] lstrlenW (lpString=".xls") returned 4
	[0048.483] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0048.483] lstrlenW (lpString=".xlsx") returned 5
	[0048.483] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0048.483] lstrlenW (lpString=".ppt") returned 4
	[0048.483] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0048.483] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74
	[0048.483] lstrlenW (lpString=".zip") returned 4
	[0048.483] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0048.483] lstrlenW (lpString=".rar") returned 4
	[0048.483] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0048.484] lstrlenW (lpString=".bz2") returned 4
	[0048.484] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0048.484] lstrlenW (lpString=".7z") returned 3
	[0048.484] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0048.484] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74
	[0048.484] lstrlenW (lpString=".dbf") returned 4
	[0048.484] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0048.484] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74
	[0048.484] lstrlenW (lpString=".1cd") returned 4
	[0048.484] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0048.484] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 74
	[0048.484] lstrlenW (lpString=".jpg") returned 4
	[0048.484] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0048.484] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0048.484] lstrlenW (lpString="OfficeLR.cab") returned 12
	[0048.484] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0048.484] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=14127746) returned 1
	[0048.484] CloseHandle (hObject=0x21c) returned 1
	[0048.484] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab")) returned 0x2020
	[0048.485] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.485] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0048.485] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0048.485] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0048.485] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0048.485] ReadFile (in: hFile=0x21c, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0049.079] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x47db80, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0049.079] ReadFile (in: hFile=0x21c, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0049.103] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0049.103] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xd39282, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0049.103] ReadFile (in: hFile=0x21c, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0049.149] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.149] WriteFile (in: hFile=0x21c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0049.165] SetEndOfFile (hFile=0x21c) returned 1
	[0049.165] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8cb50d8
	[0049.168] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0049.168] WriteFile (in: hFile=0x21c, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0049.169] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x47db80, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0049.169] WriteFile (in: hFile=0x21c, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0049.170] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xd39282, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0049.170] WriteFile (in: hFile=0x21c, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0049.172] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb50d8 | out: hHeap=0x5350000) returned 1
	[0049.172] CloseHandle (hObject=0x21c) returned 1
	[0049.172] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0049.172] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75
	[0049.172] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75
	[0049.172] lstrlenW (lpString=".doc") returned 4
	[0049.172] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0049.172] lstrlenW (lpString=".docx") returned 5
	[0049.173] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0049.173] lstrlenW (lpString=".pdf") returned 4
	[0049.173] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0049.173] lstrlenW (lpString=".xls") returned 4
	[0049.173] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0049.173] lstrlenW (lpString=".xlsx") returned 5
	[0049.173] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0049.173] lstrlenW (lpString=".ppt") returned 4
	[0049.173] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0049.173] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75
	[0049.173] lstrlenW (lpString=".zip") returned 4
	[0049.173] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0049.173] lstrlenW (lpString=".rar") returned 4
	[0049.173] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0049.173] lstrlenW (lpString=".bz2") returned 4
	[0049.173] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0049.173] lstrlenW (lpString=".7z") returned 3
	[0049.173] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0049.173] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75
	[0049.173] lstrlenW (lpString=".dbf") returned 4
	[0049.173] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0049.173] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75
	[0049.173] lstrlenW (lpString=".1cd") returned 4
	[0049.173] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0049.173] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75
	[0049.173] lstrlenW (lpString=".jpg") returned 4
	[0049.173] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0049.173] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75
	[0049.173] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75
	[0049.173] lstrlenW (lpString=".doc") returned 4
	[0049.173] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0049.173] lstrlenW (lpString=".docx") returned 5
	[0049.174] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0049.174] lstrlenW (lpString=".pdf") returned 4
	[0049.174] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0049.174] lstrlenW (lpString=".xls") returned 4
	[0049.174] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0049.174] lstrlenW (lpString=".xlsx") returned 5
	[0049.174] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0049.174] lstrlenW (lpString=".ppt") returned 4
	[0049.174] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0049.174] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75
	[0049.174] lstrlenW (lpString=".zip") returned 4
	[0049.174] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0049.174] lstrlenW (lpString=".rar") returned 4
	[0049.174] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0049.174] lstrlenW (lpString=".bz2") returned 4
	[0049.174] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0049.174] lstrlenW (lpString=".7z") returned 3
	[0049.174] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0049.174] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75
	[0049.174] lstrlenW (lpString=".dbf") returned 4
	[0049.174] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0049.174] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75
	[0049.174] lstrlenW (lpString=".1cd") returned 4
	[0049.174] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0049.174] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 75
	[0049.174] lstrlenW (lpString=".jpg") returned 4
	[0049.174] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0049.174] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0049.174] lstrlenW (lpString="osetupui.dll") returned 12
	[0049.175] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0049.175] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=191872) returned 1
	[0049.175] CloseHandle (hObject=0x21c) returned 1
	[0049.175] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll")) returned 0x2020
	[0049.175] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.175] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0049.175] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.175] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.175] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0049.176] GetLastError () returned 0x0
	[0049.176] ReadFile (in: hFile=0x21c, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x2ed80, lpOverlapped=0x0) returned 1
	[0049.227] WriteFile (in: hFile=0x1f8, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x2ed90, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x2ed90, lpOverlapped=0x0) returned 1
	[0049.231] ReadFile (in: hFile=0x21c, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.231] WriteFile (in: hFile=0x1f8, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0049.232] SetEndOfFile (hFile=0x1f8) returned 1
	[0049.232] CloseHandle (hObject=0x1f8) returned 1
	[0049.232] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.232] SetEndOfFile (hFile=0x21c) returned 1
	[0049.234] CloseHandle (hObject=0x21c) returned 1
	[0049.234] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0049.234] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll")) returned 1
	[0049.234] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0049.234] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0049.234] lstrlenW (lpString=".doc") returned 4
	[0049.234] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0049.234] lstrlenW (lpString=".docx") returned 5
	[0049.234] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0049.234] lstrlenW (lpString=".pdf") returned 4
	[0049.234] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0049.234] lstrlenW (lpString=".xls") returned 4
	[0049.234] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0049.234] lstrlenW (lpString=".xlsx") returned 5
	[0049.234] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0049.234] lstrlenW (lpString=".ppt") returned 4
	[0049.235] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0049.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0049.235] lstrlenW (lpString=".zip") returned 4
	[0049.235] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0049.235] lstrlenW (lpString=".rar") returned 4
	[0049.235] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0049.235] lstrlenW (lpString=".bz2") returned 4
	[0049.235] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0049.235] lstrlenW (lpString=".7z") returned 3
	[0049.235] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0049.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0049.235] lstrlenW (lpString=".dbf") returned 4
	[0049.235] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0049.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0049.235] lstrlenW (lpString=".1cd") returned 4
	[0049.235] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0049.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0049.235] lstrlenW (lpString=".jpg") returned 4
	[0049.235] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0049.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0049.235] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0049.235] lstrlenW (lpString=".doc") returned 4
	[0049.235] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0049.235] lstrlenW (lpString=".docx") returned 5
	[0049.235] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0049.235] lstrlenW (lpString=".pdf") returned 4
	[0049.235] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0049.235] lstrlenW (lpString=".xls") returned 4
	[0049.235] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0049.235] lstrlenW (lpString=".xlsx") returned 5
	[0049.235] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0049.235] lstrlenW (lpString=".ppt") returned 4
	[0049.236] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0049.236] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0049.236] lstrlenW (lpString=".zip") returned 4
	[0049.236] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0049.236] lstrlenW (lpString=".rar") returned 4
	[0049.236] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0049.236] lstrlenW (lpString=".bz2") returned 4
	[0049.236] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0049.236] lstrlenW (lpString=".7z") returned 3
	[0049.236] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0049.236] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0049.236] lstrlenW (lpString=".dbf") returned 4
	[0049.236] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0049.236] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0049.236] lstrlenW (lpString=".1cd") returned 4
	[0049.236] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0049.236] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 75
	[0049.236] lstrlenW (lpString=".jpg") returned 4
	[0049.236] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0049.236] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0049.236] lstrlenW (lpString="AccessMUI.msi") returned 13
	[0049.236] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0049.237] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=2517504) returned 1
	[0049.237] CloseHandle (hObject=0x21c) returned 1
	[0049.237] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi")) returned 0x2020
	[0049.237] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.237] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0049.238] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0049.238] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0049.238] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0049.238] ReadFile (in: hFile=0x21c, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0049.243] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xcce00, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0049.243] ReadFile (in: hFile=0x21c, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0049.249] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0049.250] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x226a00, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0049.250] ReadFile (in: hFile=0x21c, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0049.295] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.295] WriteFile (in: hFile=0x21c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc0106, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc0106, lpOverlapped=0x0) returned 1
	[0049.313] SetEndOfFile (hFile=0x21c) returned 1
	[0049.313] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8cb50d8
	[0049.317] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0049.317] WriteFile (in: hFile=0x21c, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0049.318] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xcce00, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0049.318] WriteFile (in: hFile=0x21c, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0049.440] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x226a00, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0049.440] WriteFile (in: hFile=0x21c, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0049.443] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb50d8 | out: hHeap=0x5350000) returned 1
	[0049.445] CloseHandle (hObject=0x21c) returned 1
	[0049.445] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0049.446] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0049.446] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0049.446] lstrlenW (lpString=".doc") returned 4
	[0049.446] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0049.446] lstrlenW (lpString=".docx") returned 5
	[0049.446] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0049.446] lstrlenW (lpString=".pdf") returned 4
	[0049.446] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0049.446] lstrlenW (lpString=".xls") returned 4
	[0049.446] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0049.446] lstrlenW (lpString=".xlsx") returned 5
	[0049.446] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0049.446] lstrlenW (lpString=".ppt") returned 4
	[0049.446] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0049.446] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0049.446] lstrlenW (lpString=".zip") returned 4
	[0049.446] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0049.446] lstrlenW (lpString=".rar") returned 4
	[0049.446] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0049.446] lstrlenW (lpString=".bz2") returned 4
	[0049.446] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0049.446] lstrlenW (lpString=".7z") returned 3
	[0049.446] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0049.446] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0049.446] lstrlenW (lpString=".dbf") returned 4
	[0049.446] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0049.446] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0049.446] lstrlenW (lpString=".1cd") returned 4
	[0049.446] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0049.446] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0049.446] lstrlenW (lpString=".jpg") returned 4
	[0049.446] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0049.447] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0049.447] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0049.447] lstrlenW (lpString=".doc") returned 4
	[0049.447] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0049.447] lstrlenW (lpString=".docx") returned 5
	[0049.447] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0049.447] lstrlenW (lpString=".pdf") returned 4
	[0049.447] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0049.447] lstrlenW (lpString=".xls") returned 4
	[0049.447] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0049.447] lstrlenW (lpString=".xlsx") returned 5
	[0049.447] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0049.447] lstrlenW (lpString=".ppt") returned 4
	[0049.447] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0049.447] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0049.447] lstrlenW (lpString=".zip") returned 4
	[0049.447] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0049.447] lstrlenW (lpString=".rar") returned 4
	[0049.447] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0049.447] lstrlenW (lpString=".bz2") returned 4
	[0049.447] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0049.447] lstrlenW (lpString=".7z") returned 3
	[0049.447] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0049.447] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0049.447] lstrlenW (lpString=".dbf") returned 4
	[0049.447] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0049.447] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0049.447] lstrlenW (lpString=".1cd") returned 4
	[0049.447] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0049.447] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 89
	[0049.447] lstrlenW (lpString=".jpg") returned 4
	[0049.447] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0049.448] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0049.448] lstrlenW (lpString="Office32WW.msi") returned 14
	[0049.448] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0049.448] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=1992192) returned 1
	[0049.448] CloseHandle (hObject=0x21c) returned 1
	[0049.448] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi")) returned 0x2020
	[0049.448] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.448] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0049.449] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0049.449] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0049.449] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0049.449] ReadFile (in: hFile=0x21c, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.347] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.347] ReadFile (in: hFile=0x21c, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.356] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0050.356] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.356] ReadFile (in: hFile=0x21c, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.375] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.376] WriteFile (in: hFile=0x21c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc0108, lpOverlapped=0x0) returned 1
	[0050.649] SetEndOfFile (hFile=0x21c) returned 1
	[0050.649] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8dad130
	[0050.649] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.649] WriteFile (in: hFile=0x21c, lpBuffer=0x8dad130*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8dad130*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.651] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.651] WriteFile (in: hFile=0x21c, lpBuffer=0x8dad130*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8dad130*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.653] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.653] WriteFile (in: hFile=0x21c, lpBuffer=0x8dad130*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8dad130*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.655] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8dad130 | out: hHeap=0x5350000) returned 1
	[0050.655] CloseHandle (hObject=0x21c) returned 1
	[0050.655] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0050.655] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0050.655] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0050.656] lstrlenW (lpString=".doc") returned 4
	[0050.656] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0050.656] lstrlenW (lpString=".docx") returned 5
	[0050.656] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1
	[0050.656] lstrlenW (lpString=".pdf") returned 4
	[0050.656] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0050.656] lstrlenW (lpString=".xls") returned 4
	[0050.656] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0050.656] lstrlenW (lpString=".xlsx") returned 5
	[0050.656] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1
	[0050.656] lstrlenW (lpString=".ppt") returned 4
	[0050.656] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0050.656] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0050.656] lstrlenW (lpString=".zip") returned 4
	[0050.656] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0050.656] lstrlenW (lpString=".rar") returned 4
	[0050.656] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0050.656] lstrlenW (lpString=".bz2") returned 4
	[0050.656] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0050.656] lstrlenW (lpString=".7z") returned 3
	[0050.656] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0050.656] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0050.656] lstrlenW (lpString=".dbf") returned 4
	[0050.656] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0050.656] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0050.656] lstrlenW (lpString=".1cd") returned 4
	[0050.656] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0050.656] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0050.656] lstrlenW (lpString=".jpg") returned 4
	[0050.656] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0050.656] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0050.657] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0050.657] lstrlenW (lpString=".doc") returned 4
	[0050.657] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0050.657] lstrlenW (lpString=".docx") returned 5
	[0050.657] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1
	[0050.657] lstrlenW (lpString=".pdf") returned 4
	[0050.657] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0050.657] lstrlenW (lpString=".xls") returned 4
	[0050.657] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0050.657] lstrlenW (lpString=".xlsx") returned 5
	[0050.657] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1
	[0050.657] lstrlenW (lpString=".ppt") returned 4
	[0050.657] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0050.657] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0050.657] lstrlenW (lpString=".zip") returned 4
	[0050.657] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0050.657] lstrlenW (lpString=".rar") returned 4
	[0050.657] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0050.657] lstrlenW (lpString=".bz2") returned 4
	[0050.657] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0050.657] lstrlenW (lpString=".7z") returned 3
	[0050.657] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0050.657] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0050.657] lstrlenW (lpString=".dbf") returned 4
	[0050.657] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0050.657] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0050.657] lstrlenW (lpString=".1cd") returned 4
	[0050.657] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0050.657] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0050.657] lstrlenW (lpString=".jpg") returned 4
	[0050.657] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0050.658] lstrcmpiW (lpString1=".xrm-ms", lpString2=".beets") returned 1
	[0050.658] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24
	[0050.658] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0050.658] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=715834) returned 1
	[0050.658] CloseHandle (hObject=0x21c) returned 1
	[0050.658] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 0x2020
	[0050.658] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.658] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0050.658] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.658] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.658] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c
	[0050.659] GetLastError () returned 0x0
	[0050.659] ReadFile (in: hFile=0x21c, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0xaec3a, lpOverlapped=0x0) returned 1
	[0050.810] WriteFile (in: hFile=0x16c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xaec40, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xaec40, lpOverlapped=0x0) returned 1
	[0050.822] ReadFile (in: hFile=0x21c, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.822] WriteFile (in: hFile=0x16c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x104, lpOverlapped=0x0) returned 1
	[0050.822] SetEndOfFile (hFile=0x16c) returned 1
	[0050.822] CloseHandle (hObject=0x16c) returned 1
	[0050.822] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.823] SetEndOfFile (hFile=0x21c) returned 1
	[0050.828] CloseHandle (hObject=0x21c) returned 1
	[0050.829] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0050.829] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 1
	[0050.829] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0050.829] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0050.829] lstrlenW (lpString=".doc") returned 4
	[0050.829] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0050.829] lstrlenW (lpString=".docx") returned 5
	[0050.829] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0050.829] lstrlenW (lpString=".pdf") returned 4
	[0050.829] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0050.829] lstrlenW (lpString=".xls") returned 4
	[0050.829] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0050.829] lstrlenW (lpString=".xlsx") returned 5
	[0050.829] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0050.829] lstrlenW (lpString=".ppt") returned 4
	[0050.829] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0050.829] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0050.829] lstrlenW (lpString=".zip") returned 4
	[0050.829] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0050.829] lstrlenW (lpString=".rar") returned 4
	[0050.830] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0050.830] lstrlenW (lpString=".bz2") returned 4
	[0050.830] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0050.830] lstrlenW (lpString=".7z") returned 3
	[0050.830] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0050.830] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0050.830] lstrlenW (lpString=".dbf") returned 4
	[0050.830] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0050.830] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0050.830] lstrlenW (lpString=".1cd") returned 4
	[0050.830] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0050.830] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0050.830] lstrlenW (lpString=".jpg") returned 4
	[0050.830] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0050.830] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0050.830] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0050.830] lstrlenW (lpString=".doc") returned 4
	[0050.830] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0050.830] lstrlenW (lpString=".docx") returned 5
	[0050.830] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0050.830] lstrlenW (lpString=".pdf") returned 4
	[0050.830] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0050.830] lstrlenW (lpString=".xls") returned 4
	[0050.830] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0050.830] lstrlenW (lpString=".xlsx") returned 5
	[0050.830] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0050.830] lstrlenW (lpString=".ppt") returned 4
	[0050.830] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0050.830] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0050.830] lstrlenW (lpString=".zip") returned 4
	[0050.830] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0050.831] lstrlenW (lpString=".rar") returned 4
	[0050.831] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0050.831] lstrlenW (lpString=".bz2") returned 4
	[0050.831] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0050.831] lstrlenW (lpString=".7z") returned 3
	[0050.831] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0050.831] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0050.831] lstrlenW (lpString=".dbf") returned 4
	[0050.831] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0050.831] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0050.831] lstrlenW (lpString=".1cd") returned 4
	[0050.831] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0050.831] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0050.831] lstrlenW (lpString=".jpg") returned 4
	[0050.831] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0050.831] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0050.831] lstrlenW (lpString="ProPlusrWW.msi") returned 14
	[0050.831] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0050.831] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=27532288) returned 1
	[0050.832] CloseHandle (hObject=0x21c) returned 1
	[0050.832] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi")) returned 0x2020
	[0050.832] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.832] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0050.953] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0050.953] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0050.954] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.954] ReadFile (in: hFile=0x21c, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.983] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x8c0955, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.984] ReadFile (in: hFile=0x21c, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.027] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0051.027] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x1a01c00, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.027] ReadFile (in: hFile=0x21c, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.072] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.072] WriteFile (in: hFile=0x21c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc0108, lpOverlapped=0x0) returned 1
	[0051.088] SetEndOfFile (hFile=0x21c) returned 1
	[0051.088] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d1d100
	[0051.156] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.156] WriteFile (in: hFile=0x21c, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.156] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x8c0955, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.156] WriteFile (in: hFile=0x21c, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.160] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x1a01c00, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.160] WriteFile (in: hFile=0x21c, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.162] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d1d100 | out: hHeap=0x5350000) returned 1
	[0051.162] CloseHandle (hObject=0x21c) returned 1
	[0051.162] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0051.163] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77
	[0051.163] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77
	[0051.163] lstrlenW (lpString=".doc") returned 4
	[0051.163] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0051.163] lstrlenW (lpString=".docx") returned 5
	[0051.163] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1
	[0051.163] lstrlenW (lpString=".pdf") returned 4
	[0051.163] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0051.163] lstrlenW (lpString=".xls") returned 4
	[0051.163] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0051.163] lstrlenW (lpString=".xlsx") returned 5
	[0051.163] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1
	[0051.163] lstrlenW (lpString=".ppt") returned 4
	[0051.163] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0051.163] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77
	[0051.163] lstrlenW (lpString=".zip") returned 4
	[0051.163] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0051.163] lstrlenW (lpString=".rar") returned 4
	[0051.163] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0051.163] lstrlenW (lpString=".bz2") returned 4
	[0051.163] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0051.163] lstrlenW (lpString=".7z") returned 3
	[0051.163] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0051.163] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77
	[0051.163] lstrlenW (lpString=".dbf") returned 4
	[0051.163] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0051.163] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77
	[0051.163] lstrlenW (lpString=".1cd") returned 4
	[0051.163] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0051.164] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77
	[0051.164] lstrlenW (lpString=".jpg") returned 4
	[0051.164] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0051.164] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77
	[0051.164] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77
	[0051.164] lstrlenW (lpString=".doc") returned 4
	[0051.164] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0051.164] lstrlenW (lpString=".docx") returned 5
	[0051.164] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1
	[0051.164] lstrlenW (lpString=".pdf") returned 4
	[0051.164] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0051.164] lstrlenW (lpString=".xls") returned 4
	[0051.164] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0051.164] lstrlenW (lpString=".xlsx") returned 5
	[0051.164] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1
	[0051.164] lstrlenW (lpString=".ppt") returned 4
	[0051.164] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0051.164] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77
	[0051.164] lstrlenW (lpString=".zip") returned 4
	[0051.164] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0051.164] lstrlenW (lpString=".rar") returned 4
	[0051.164] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0051.164] lstrlenW (lpString=".bz2") returned 4
	[0051.164] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0051.164] lstrlenW (lpString=".7z") returned 3
	[0051.164] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0051.164] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77
	[0051.164] lstrlenW (lpString=".dbf") returned 4
	[0051.164] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0051.164] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77
	[0051.164] lstrlenW (lpString=".1cd") returned 4
	[0051.164] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0051.164] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 77
	[0051.165] lstrlenW (lpString=".jpg") returned 4
	[0051.165] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0051.165] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0051.165] lstrlenW (lpString="Office32WW.msi") returned 14
	[0051.165] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0051.260] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=1992192) returned 1
	[0051.260] CloseHandle (hObject=0x214) returned 1
	[0051.260] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi")) returned 0x2020
	[0051.260] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.260] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0051.267] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0051.267] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0051.267] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.267] ReadFile (in: hFile=0x214, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.397] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.397] ReadFile (in: hFile=0x214, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.425] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0051.425] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.425] ReadFile (in: hFile=0x214, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.464] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.464] WriteFile (in: hFile=0x214, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc0108, lpOverlapped=0x0) returned 1
	[0051.597] SetEndOfFile (hFile=0x214) returned 1
	[0051.597] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d1d100
	[0051.604] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.604] WriteFile (in: hFile=0x214, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.605] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.605] WriteFile (in: hFile=0x214, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.607] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.607] WriteFile (in: hFile=0x214, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.609] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d1d100 | out: hHeap=0x5350000) returned 1
	[0051.611] CloseHandle (hObject=0x214) returned 1
	[0051.611] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0051.611] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0051.612] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0051.612] lstrlenW (lpString=".doc") returned 4
	[0051.612] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0051.612] lstrlenW (lpString=".docx") returned 5
	[0051.612] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1
	[0051.612] lstrlenW (lpString=".pdf") returned 4
	[0051.612] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0051.612] lstrlenW (lpString=".xls") returned 4
	[0051.612] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0051.612] lstrlenW (lpString=".xlsx") returned 5
	[0051.612] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1
	[0051.612] lstrlenW (lpString=".ppt") returned 4
	[0051.612] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0051.612] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0051.612] lstrlenW (lpString=".zip") returned 4
	[0051.612] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0051.612] lstrlenW (lpString=".rar") returned 4
	[0051.612] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0051.612] lstrlenW (lpString=".bz2") returned 4
	[0051.612] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0051.612] lstrlenW (lpString=".7z") returned 3
	[0051.612] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0051.612] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0051.612] lstrlenW (lpString=".dbf") returned 4
	[0051.612] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0051.612] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0051.612] lstrlenW (lpString=".1cd") returned 4
	[0051.612] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0051.612] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0051.612] lstrlenW (lpString=".jpg") returned 4
	[0051.612] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0051.613] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0051.613] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0051.613] lstrlenW (lpString=".doc") returned 4
	[0051.613] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0051.613] lstrlenW (lpString=".docx") returned 5
	[0051.613] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1
	[0051.613] lstrlenW (lpString=".pdf") returned 4
	[0051.613] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0051.613] lstrlenW (lpString=".xls") returned 4
	[0051.613] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0051.613] lstrlenW (lpString=".xlsx") returned 5
	[0051.613] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1
	[0051.613] lstrlenW (lpString=".ppt") returned 4
	[0051.613] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0051.613] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0051.613] lstrlenW (lpString=".zip") returned 4
	[0051.613] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0051.613] lstrlenW (lpString=".rar") returned 4
	[0051.613] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0051.613] lstrlenW (lpString=".bz2") returned 4
	[0051.613] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0051.613] lstrlenW (lpString=".7z") returned 3
	[0051.613] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0051.613] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0051.613] lstrlenW (lpString=".dbf") returned 4
	[0051.613] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0051.613] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0051.613] lstrlenW (lpString=".1cd") returned 4
	[0051.613] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0051.613] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 77
	[0051.613] lstrlenW (lpString=".jpg") returned 4
	[0051.613] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0051.614] lstrcmpiW (lpString1=".xrm-ms", lpString2=".beets") returned 1
	[0051.614] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24
	[0051.614] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0051.702] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=715834) returned 1
	[0051.702] CloseHandle (hObject=0x1b0) returned 1
	[0051.702] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 0x2020
	[0051.702] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.702] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0
	[0051.702] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.704] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.704] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0051.705] GetLastError () returned 0x0
	[0051.705] ReadFile (in: hFile=0x1b0, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0xaec3a, lpOverlapped=0x0) returned 1
	[0051.762] WriteFile (in: hFile=0x214, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xaec40, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xaec40, lpOverlapped=0x0) returned 1
	[0052.020] ReadFile (in: hFile=0x1b0, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.020] WriteFile (in: hFile=0x214, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x104, lpOverlapped=0x0) returned 1
	[0052.020] SetEndOfFile (hFile=0x214) returned 1
	[0052.021] CloseHandle (hObject=0x214) returned 1
	[0052.021] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.021] SetEndOfFile (hFile=0x1b0) returned 1
	[0052.839] CloseHandle (hObject=0x1b0) returned 1
	[0053.104] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0053.107] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 1
	[0053.107] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.107] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.107] lstrlenW (lpString=".doc") returned 4
	[0053.122] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0053.122] lstrlenW (lpString=".docx") returned 5
	[0053.122] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0053.122] lstrlenW (lpString=".pdf") returned 4
	[0053.122] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0053.122] lstrlenW (lpString=".xls") returned 4
	[0053.122] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0053.122] lstrlenW (lpString=".xlsx") returned 5
	[0053.122] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0053.122] lstrlenW (lpString=".ppt") returned 4
	[0053.122] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0053.122] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.122] lstrlenW (lpString=".zip") returned 4
	[0053.122] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0053.122] lstrlenW (lpString=".rar") returned 4
	[0053.122] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0053.123] lstrlenW (lpString=".bz2") returned 4
	[0053.123] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0053.123] lstrlenW (lpString=".7z") returned 3
	[0053.127] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0053.128] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.128] lstrlenW (lpString=".dbf") returned 4
	[0053.128] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0053.128] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.128] lstrlenW (lpString=".1cd") returned 4
	[0053.128] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0053.128] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.128] lstrlenW (lpString=".jpg") returned 4
	[0053.128] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0053.128] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.128] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.132] lstrlenW (lpString=".doc") returned 4
	[0053.132] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0053.132] lstrlenW (lpString=".docx") returned 5
	[0053.141] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0053.141] lstrlenW (lpString=".pdf") returned 4
	[0053.141] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0053.141] lstrlenW (lpString=".xls") returned 4
	[0053.142] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0053.142] lstrlenW (lpString=".xlsx") returned 5
	[0053.142] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0053.142] lstrlenW (lpString=".ppt") returned 4
	[0053.142] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0053.142] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.142] lstrlenW (lpString=".zip") returned 4
	[0053.142] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0053.142] lstrlenW (lpString=".rar") returned 4
	[0053.142] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0053.142] lstrlenW (lpString=".bz2") returned 4
	[0053.142] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0053.142] lstrlenW (lpString=".7z") returned 3
	[0053.142] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0053.142] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.142] lstrlenW (lpString=".dbf") returned 4
	[0053.142] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0053.142] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.142] lstrlenW (lpString=".1cd") returned 4
	[0053.142] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0053.142] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.142] lstrlenW (lpString=".jpg") returned 4
	[0053.142] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0053.142] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0053.142] lstrlenW (lpString="OWOW32WW.cab") returned 12
	[0053.142] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0053.143] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=36233052) returned 1
	[0053.143] CloseHandle (hObject=0x1f8) returned 1
	[0053.143] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab")) returned 0x2020
	[0053.143] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0053.143] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0053.144] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0053.144] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0053.144] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0053.144] ReadFile (in: hFile=0x1f8, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0053.311] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0053.312] ReadFile (in: hFile=0x1f8, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0053.447] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0053.447] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0053.447] ReadFile (in: hFile=0x1f8, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0053.560] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.560] WriteFile (in: hFile=0x1f8, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0053.782] SetEndOfFile (hFile=0x1f8) returned 1
	[0053.921] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d1d100
	[0053.963] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0053.963] WriteFile (in: hFile=0x1f8, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0053.964] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0053.964] WriteFile (in: hFile=0x1f8, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0053.965] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0053.965] WriteFile (in: hFile=0x1f8, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0053.967] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d1d100 | out: hHeap=0x5350000) returned 1
	[0053.967] CloseHandle (hObject=0x1f8) returned 1
	[0054.015] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0054.015] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0054.015] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0054.015] lstrlenW (lpString=".doc") returned 4
	[0054.015] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0054.015] lstrlenW (lpString=".docx") returned 5
	[0054.015] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1
	[0054.015] lstrlenW (lpString=".pdf") returned 4
	[0054.015] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0054.015] lstrlenW (lpString=".xls") returned 4
	[0054.015] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0054.015] lstrlenW (lpString=".xlsx") returned 5
	[0054.015] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1
	[0054.015] lstrlenW (lpString=".ppt") returned 4
	[0054.015] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0054.015] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0054.015] lstrlenW (lpString=".zip") returned 4
	[0054.015] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0054.015] lstrlenW (lpString=".rar") returned 4
	[0054.016] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0054.016] lstrlenW (lpString=".bz2") returned 4
	[0054.016] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0054.016] lstrlenW (lpString=".7z") returned 3
	[0054.016] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0054.016] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0054.016] lstrlenW (lpString=".dbf") returned 4
	[0054.016] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0054.016] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0054.016] lstrlenW (lpString=".1cd") returned 4
	[0054.016] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0054.016] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0054.016] lstrlenW (lpString=".jpg") returned 4
	[0054.016] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0054.016] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0054.016] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0054.016] lstrlenW (lpString=".doc") returned 4
	[0054.016] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0054.016] lstrlenW (lpString=".docx") returned 5
	[0054.016] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1
	[0054.016] lstrlenW (lpString=".pdf") returned 4
	[0054.016] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0054.016] lstrlenW (lpString=".xls") returned 4
	[0054.016] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0054.016] lstrlenW (lpString=".xlsx") returned 5
	[0054.016] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1
	[0054.016] lstrlenW (lpString=".ppt") returned 4
	[0054.016] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0054.016] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0054.016] lstrlenW (lpString=".zip") returned 4
	[0054.016] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0054.017] lstrlenW (lpString=".rar") returned 4
	[0054.017] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0054.017] lstrlenW (lpString=".bz2") returned 4
	[0054.017] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0054.017] lstrlenW (lpString=".7z") returned 3
	[0054.017] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0054.017] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0054.017] lstrlenW (lpString=".dbf") returned 4
	[0054.017] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0054.017] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0054.017] lstrlenW (lpString=".1cd") returned 4
	[0054.017] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0054.017] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0054.017] lstrlenW (lpString=".jpg") returned 4
	[0054.017] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0054.017] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0054.017] lstrlenW (lpString="VisiorWW.msi") returned 12
	[0054.017] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0055.098] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=12060672) returned 1
	[0055.098] CloseHandle (hObject=0x1dc) returned 1
	[0055.098] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi")) returned 0x2020
	[0055.098] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.098] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0055.108] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0055.108] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0055.108] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0055.138] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0055.142] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x3d5800, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0055.142] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0055.154] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0055.154] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xb40800, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0055.154] ReadFile (in: hFile=0x1dc, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0055.170] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.170] WriteFile (in: hFile=0x1dc, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0055.411] SetEndOfFile (hFile=0x1dc) returned 1
	[0055.411] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d5d120
	[0055.411] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0055.411] WriteFile (in: hFile=0x1dc, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0055.412] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x3d5800, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0055.412] WriteFile (in: hFile=0x1dc, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0055.418] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0xb40800, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0055.418] WriteFile (in: hFile=0x1dc, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0055.420] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d5d120 | out: hHeap=0x5350000) returned 1
	[0055.420] CloseHandle (hObject=0x1dc) returned 1
	[0055.420] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0055.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75
	[0055.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75
	[0055.420] lstrlenW (lpString=".doc") returned 4
	[0055.420] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0055.420] lstrlenW (lpString=".docx") returned 5
	[0055.420] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1
	[0055.421] lstrlenW (lpString=".pdf") returned 4
	[0055.421] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0055.421] lstrlenW (lpString=".xls") returned 4
	[0055.421] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0055.421] lstrlenW (lpString=".xlsx") returned 5
	[0055.421] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1
	[0055.421] lstrlenW (lpString=".ppt") returned 4
	[0055.421] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0055.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75
	[0055.421] lstrlenW (lpString=".zip") returned 4
	[0055.421] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0055.421] lstrlenW (lpString=".rar") returned 4
	[0055.421] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0055.421] lstrlenW (lpString=".bz2") returned 4
	[0055.421] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0055.421] lstrlenW (lpString=".7z") returned 3
	[0055.421] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0055.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75
	[0055.421] lstrlenW (lpString=".dbf") returned 4
	[0055.421] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0055.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75
	[0055.421] lstrlenW (lpString=".1cd") returned 4
	[0055.421] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0055.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75
	[0055.421] lstrlenW (lpString=".jpg") returned 4
	[0055.421] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0055.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75
	[0055.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75
	[0055.421] lstrlenW (lpString=".doc") returned 4
	[0055.421] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0055.421] lstrlenW (lpString=".docx") returned 5
	[0055.421] lstrcmpiW (lpString1=".docx", lpString2="W.msi") returned -1
	[0055.421] lstrlenW (lpString=".pdf") returned 4
	[0055.422] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0055.422] lstrlenW (lpString=".xls") returned 4
	[0055.422] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0055.422] lstrlenW (lpString=".xlsx") returned 5
	[0055.422] lstrcmpiW (lpString1=".xlsx", lpString2="W.msi") returned -1
	[0055.422] lstrlenW (lpString=".ppt") returned 4
	[0055.422] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0055.422] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75
	[0055.422] lstrlenW (lpString=".zip") returned 4
	[0055.422] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0055.422] lstrlenW (lpString=".rar") returned 4
	[0055.422] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0055.422] lstrlenW (lpString=".bz2") returned 4
	[0055.422] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0055.422] lstrlenW (lpString=".7z") returned 3
	[0055.422] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0055.422] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75
	[0055.422] lstrlenW (lpString=".dbf") returned 4
	[0055.422] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0055.422] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75
	[0055.422] lstrlenW (lpString=".1cd") returned 4
	[0055.422] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0055.422] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 75
	[0055.422] lstrlenW (lpString=".jpg") returned 4
	[0055.422] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0055.422] lstrcmpiW (lpString1=".manifest", lpString2=".beets") returned 1
	[0055.422] lstrlenW (lpString="eqnedt32.exe.manifest") returned 21
	[0055.422] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0055.423] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=566) returned 1
	[0055.423] CloseHandle (hObject=0x1dc) returned 1
	[0055.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest")) returned 0x20
	[0055.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.423] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0055.423] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.423] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.423] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0055.424] GetLastError () returned 0x0
	[0055.424] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x236, lpOverlapped=0x0) returned 1
	[0055.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x240, lpOverlapped=0x0) returned 1
	[0055.427] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xfe, lpOverlapped=0x0) returned 1
	[0055.428] SetEndOfFile (hFile=0x1ec) returned 1
	[0055.428] CloseHandle (hObject=0x1ec) returned 1
	[0055.428] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.428] SetEndOfFile (hFile=0x1dc) returned 1
	[0055.429] CloseHandle (hObject=0x1dc) returned 1
	[0055.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.429] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest")) returned 1
	[0055.429] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77
	[0055.429] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77
	[0055.429] lstrlenW (lpString=".doc") returned 4
	[0055.429] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1
	[0055.429] lstrlenW (lpString=".docx") returned 5
	[0055.429] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1
	[0055.429] lstrlenW (lpString=".pdf") returned 4
	[0055.429] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1
	[0055.429] lstrlenW (lpString=".xls") returned 4
	[0055.429] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1
	[0055.429] lstrlenW (lpString=".xlsx") returned 5
	[0055.429] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1
	[0055.429] lstrlenW (lpString=".ppt") returned 4
	[0055.430] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1
	[0055.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77
	[0055.430] lstrlenW (lpString=".zip") returned 4
	[0055.430] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1
	[0055.430] lstrlenW (lpString=".rar") returned 4
	[0055.430] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1
	[0055.430] lstrlenW (lpString=".bz2") returned 4
	[0055.430] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1
	[0055.430] lstrlenW (lpString=".7z") returned 3
	[0055.430] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1
	[0055.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77
	[0055.430] lstrlenW (lpString=".dbf") returned 4
	[0055.430] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1
	[0055.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77
	[0055.430] lstrlenW (lpString=".1cd") returned 4
	[0055.430] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1
	[0055.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77
	[0055.430] lstrlenW (lpString=".jpg") returned 4
	[0055.430] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1
	[0055.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77
	[0055.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77
	[0055.430] lstrlenW (lpString=".doc") returned 4
	[0055.430] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1
	[0055.430] lstrlenW (lpString=".docx") returned 5
	[0055.430] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1
	[0055.430] lstrlenW (lpString=".pdf") returned 4
	[0055.430] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1
	[0055.430] lstrlenW (lpString=".xls") returned 4
	[0055.430] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1
	[0055.430] lstrlenW (lpString=".xlsx") returned 5
	[0055.430] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1
	[0055.430] lstrlenW (lpString=".ppt") returned 4
	[0055.430] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1
	[0055.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77
	[0055.431] lstrlenW (lpString=".zip") returned 4
	[0055.431] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1
	[0055.431] lstrlenW (lpString=".rar") returned 4
	[0055.431] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1
	[0055.431] lstrlenW (lpString=".bz2") returned 4
	[0055.431] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1
	[0055.431] lstrlenW (lpString=".7z") returned 3
	[0055.431] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1
	[0055.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77
	[0055.431] lstrlenW (lpString=".dbf") returned 4
	[0055.431] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1
	[0055.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77
	[0055.431] lstrlenW (lpString=".1cd") returned 4
	[0055.431] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1
	[0055.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest") returned 77
	[0055.431] lstrlenW (lpString=".jpg") returned 4
	[0055.431] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1
	[0055.431] lstrcmpiW (lpString1=".HLP", lpString2=".beets") returned 1
	[0055.431] lstrlenW (lpString="EQNEDT32.HLP") returned 12
	[0055.431] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0055.432] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=176311) returned 1
	[0055.432] CloseHandle (hObject=0x1dc) returned 1
	[0055.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp")) returned 0x20
	[0055.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.432] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0055.432] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.432] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.432] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0055.432] GetLastError () returned 0x0
	[0055.432] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x2b0b7, lpOverlapped=0x0) returned 1
	[0055.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x2b0c0, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x2b0c0, lpOverlapped=0x0) returned 1
	[0055.632] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0055.633] SetEndOfFile (hFile=0x1ec) returned 1
	[0055.633] CloseHandle (hObject=0x1ec) returned 1
	[0055.633] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.633] SetEndOfFile (hFile=0x1dc) returned 1
	[0055.635] CloseHandle (hObject=0x1dc) returned 1
	[0055.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.635] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp")) returned 1
	[0055.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68
	[0055.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68
	[0055.635] lstrlenW (lpString=".doc") returned 4
	[0055.635] lstrcmpiW (lpString1=".doc", lpString2=".HLP") returned -1
	[0055.635] lstrlenW (lpString=".docx") returned 5
	[0055.635] lstrcmpiW (lpString1=".docx", lpString2="2.HLP") returned -1
	[0055.635] lstrlenW (lpString=".pdf") returned 4
	[0055.635] lstrcmpiW (lpString1=".pdf", lpString2=".HLP") returned 1
	[0055.635] lstrlenW (lpString=".xls") returned 4
	[0055.635] lstrcmpiW (lpString1=".xls", lpString2=".HLP") returned 1
	[0055.635] lstrlenW (lpString=".xlsx") returned 5
	[0055.635] lstrcmpiW (lpString1=".xlsx", lpString2="2.HLP") returned -1
	[0055.636] lstrlenW (lpString=".ppt") returned 4
	[0055.636] lstrcmpiW (lpString1=".ppt", lpString2=".HLP") returned 1
	[0055.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68
	[0055.636] lstrlenW (lpString=".zip") returned 4
	[0055.636] lstrcmpiW (lpString1=".zip", lpString2=".HLP") returned 1
	[0055.636] lstrlenW (lpString=".rar") returned 4
	[0055.636] lstrcmpiW (lpString1=".rar", lpString2=".HLP") returned 1
	[0055.636] lstrlenW (lpString=".bz2") returned 4
	[0055.636] lstrcmpiW (lpString1=".bz2", lpString2=".HLP") returned -1
	[0055.636] lstrlenW (lpString=".7z") returned 3
	[0055.636] lstrcmpiW (lpString1=".7z", lpString2="HLP") returned -1
	[0055.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68
	[0055.636] lstrlenW (lpString=".dbf") returned 4
	[0055.636] lstrcmpiW (lpString1=".dbf", lpString2=".HLP") returned -1
	[0055.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68
	[0055.636] lstrlenW (lpString=".1cd") returned 4
	[0055.636] lstrcmpiW (lpString1=".1cd", lpString2=".HLP") returned -1
	[0055.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68
	[0055.636] lstrlenW (lpString=".jpg") returned 4
	[0055.636] lstrcmpiW (lpString1=".jpg", lpString2=".HLP") returned 1
	[0055.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68
	[0055.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68
	[0055.636] lstrlenW (lpString=".doc") returned 4
	[0055.636] lstrcmpiW (lpString1=".doc", lpString2=".HLP") returned -1
	[0055.636] lstrlenW (lpString=".docx") returned 5
	[0055.636] lstrcmpiW (lpString1=".docx", lpString2="2.HLP") returned -1
	[0055.636] lstrlenW (lpString=".pdf") returned 4
	[0055.636] lstrcmpiW (lpString1=".pdf", lpString2=".HLP") returned 1
	[0055.636] lstrlenW (lpString=".xls") returned 4
	[0055.636] lstrcmpiW (lpString1=".xls", lpString2=".HLP") returned 1
	[0055.636] lstrlenW (lpString=".xlsx") returned 5
	[0055.637] lstrcmpiW (lpString1=".xlsx", lpString2="2.HLP") returned -1
	[0055.637] lstrlenW (lpString=".ppt") returned 4
	[0055.637] lstrcmpiW (lpString1=".ppt", lpString2=".HLP") returned 1
	[0055.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68
	[0055.637] lstrlenW (lpString=".zip") returned 4
	[0055.637] lstrcmpiW (lpString1=".zip", lpString2=".HLP") returned 1
	[0055.637] lstrlenW (lpString=".rar") returned 4
	[0055.637] lstrcmpiW (lpString1=".rar", lpString2=".HLP") returned 1
	[0055.637] lstrlenW (lpString=".bz2") returned 4
	[0055.637] lstrcmpiW (lpString1=".bz2", lpString2=".HLP") returned -1
	[0055.637] lstrlenW (lpString=".7z") returned 3
	[0055.637] lstrcmpiW (lpString1=".7z", lpString2="HLP") returned -1
	[0055.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68
	[0055.637] lstrlenW (lpString=".dbf") returned 4
	[0055.637] lstrcmpiW (lpString1=".dbf", lpString2=".HLP") returned -1
	[0055.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68
	[0055.637] lstrlenW (lpString=".1cd") returned 4
	[0055.637] lstrcmpiW (lpString1=".1cd", lpString2=".HLP") returned -1
	[0055.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP") returned 68
	[0055.637] lstrlenW (lpString=".jpg") returned 4
	[0055.637] lstrcmpiW (lpString1=".jpg", lpString2=".HLP") returned 1
	[0055.637] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0055.637] lstrlenW (lpString="MSOEURO.DLL") returned 11
	[0055.637] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0055.638] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=31104) returned 1
	[0055.638] CloseHandle (hObject=0x1dc) returned 1
	[0055.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll")) returned 0x20
	[0055.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.638] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0055.638] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.638] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.638] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0055.639] GetLastError () returned 0x0
	[0055.639] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x7980, lpOverlapped=0x0) returned 1
	[0055.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x7990, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x7990, lpOverlapped=0x0) returned 1
	[0055.642] ReadFile (in: hFile=0x1dc, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0055.642] SetEndOfFile (hFile=0x1ec) returned 1
	[0055.643] CloseHandle (hObject=0x1ec) returned 1
	[0055.643] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.643] SetEndOfFile (hFile=0x1dc) returned 1
	[0055.644] CloseHandle (hObject=0x1dc) returned 1
	[0055.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.644] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll")) returned 1
	[0055.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63
	[0055.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63
	[0055.644] lstrlenW (lpString=".doc") returned 4
	[0055.644] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0055.644] lstrlenW (lpString=".docx") returned 5
	[0055.644] lstrcmpiW (lpString1=".docx", lpString2="O.DLL") returned -1
	[0055.644] lstrlenW (lpString=".pdf") returned 4
	[0055.644] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0055.644] lstrlenW (lpString=".xls") returned 4
	[0055.644] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0055.644] lstrlenW (lpString=".xlsx") returned 5
	[0055.644] lstrcmpiW (lpString1=".xlsx", lpString2="O.DLL") returned -1
	[0055.644] lstrlenW (lpString=".ppt") returned 4
	[0055.645] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0055.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63
	[0055.645] lstrlenW (lpString=".zip") returned 4
	[0055.645] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0055.645] lstrlenW (lpString=".rar") returned 4
	[0055.645] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0055.645] lstrlenW (lpString=".bz2") returned 4
	[0055.645] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0055.645] lstrlenW (lpString=".7z") returned 3
	[0055.645] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0055.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63
	[0055.645] lstrlenW (lpString=".dbf") returned 4
	[0055.645] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0055.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63
	[0055.645] lstrlenW (lpString=".1cd") returned 4
	[0055.645] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0055.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63
	[0055.645] lstrlenW (lpString=".jpg") returned 4
	[0055.645] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0055.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63
	[0055.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63
	[0055.645] lstrlenW (lpString=".doc") returned 4
	[0055.645] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0055.645] lstrlenW (lpString=".docx") returned 5
	[0055.645] lstrcmpiW (lpString1=".docx", lpString2="O.DLL") returned -1
	[0055.645] lstrlenW (lpString=".pdf") returned 4
	[0055.645] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0055.645] lstrlenW (lpString=".xls") returned 4
	[0055.645] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0055.645] lstrlenW (lpString=".xlsx") returned 5
	[0055.645] lstrcmpiW (lpString1=".xlsx", lpString2="O.DLL") returned -1
	[0055.645] lstrlenW (lpString=".ppt") returned 4
	[0055.646] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0055.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63
	[0055.646] lstrlenW (lpString=".zip") returned 4
	[0055.646] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0055.646] lstrlenW (lpString=".rar") returned 4
	[0055.646] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0055.646] lstrlenW (lpString=".bz2") returned 4
	[0055.646] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0055.646] lstrlenW (lpString=".7z") returned 3
	[0055.646] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0055.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63
	[0055.646] lstrlenW (lpString=".dbf") returned 4
	[0055.646] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0055.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63
	[0055.646] lstrlenW (lpString=".1cd") returned 4
	[0055.646] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0055.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL") returned 63
	[0055.646] lstrlenW (lpString=".jpg") returned 4
	[0055.646] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0055.646] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0055.646] lstrlenW (lpString="msgfilt.dll") returned 11
	[0055.646] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0055.647] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=38768) returned 1
	[0055.647] CloseHandle (hObject=0x1f4) returned 1
	[0055.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll")) returned 0x20
	[0055.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.648] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0055.648] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.648] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.648] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0055.649] GetLastError () returned 0x0
	[0055.649] ReadFile (in: hFile=0x1f4, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x9770, lpOverlapped=0x0) returned 1
	[0055.652] WriteFile (in: hFile=0x1dc, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x9780, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x9780, lpOverlapped=0x0) returned 1
	[0055.654] ReadFile (in: hFile=0x1f4, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.654] WriteFile (in: hFile=0x1dc, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0055.654] SetEndOfFile (hFile=0x1dc) returned 1
	[0055.654] CloseHandle (hObject=0x1dc) returned 1
	[0055.654] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.654] SetEndOfFile (hFile=0x1f4) returned 1
	[0055.655] CloseHandle (hObject=0x1f4) returned 1
	[0055.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.655] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll")) returned 1
	[0055.658] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66
	[0055.658] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66
	[0055.658] lstrlenW (lpString=".doc") returned 4
	[0055.658] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0055.658] lstrlenW (lpString=".docx") returned 5
	[0055.658] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0055.658] lstrlenW (lpString=".pdf") returned 4
	[0055.658] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0055.658] lstrlenW (lpString=".xls") returned 4
	[0055.658] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0055.658] lstrlenW (lpString=".xlsx") returned 5
	[0055.658] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0055.658] lstrlenW (lpString=".ppt") returned 4
	[0055.658] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0055.658] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66
	[0055.658] lstrlenW (lpString=".zip") returned 4
	[0055.658] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0055.658] lstrlenW (lpString=".rar") returned 4
	[0055.658] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0055.658] lstrlenW (lpString=".bz2") returned 4
	[0055.658] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0055.658] lstrlenW (lpString=".7z") returned 3
	[0055.658] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0055.658] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66
	[0055.658] lstrlenW (lpString=".dbf") returned 4
	[0055.658] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0055.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66
	[0055.659] lstrlenW (lpString=".1cd") returned 4
	[0055.659] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0055.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66
	[0055.659] lstrlenW (lpString=".jpg") returned 4
	[0055.659] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0055.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66
	[0055.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66
	[0055.659] lstrlenW (lpString=".doc") returned 4
	[0055.659] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0055.659] lstrlenW (lpString=".docx") returned 5
	[0055.659] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0055.659] lstrlenW (lpString=".pdf") returned 4
	[0055.659] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0055.659] lstrlenW (lpString=".xls") returned 4
	[0055.659] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0055.659] lstrlenW (lpString=".xlsx") returned 5
	[0055.659] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0055.659] lstrlenW (lpString=".ppt") returned 4
	[0055.659] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0055.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66
	[0055.659] lstrlenW (lpString=".zip") returned 4
	[0055.659] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0055.659] lstrlenW (lpString=".rar") returned 4
	[0055.659] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0055.659] lstrlenW (lpString=".bz2") returned 4
	[0055.659] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0055.659] lstrlenW (lpString=".7z") returned 3
	[0055.659] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0055.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66
	[0055.659] lstrlenW (lpString=".dbf") returned 4
	[0055.660] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0055.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66
	[0055.660] lstrlenW (lpString=".1cd") returned 4
	[0055.660] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0055.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll") returned 66
	[0055.660] lstrlenW (lpString=".jpg") returned 4
	[0055.660] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0055.660] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0055.660] lstrlenW (lpString="odffilt.dll") returned 11
	[0055.660] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0055.661] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=1312656) returned 1
	[0055.661] CloseHandle (hObject=0x1f4) returned 1
	[0055.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll")) returned 0x20
	[0055.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.661] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0055.661] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.661] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.661] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc
	[0055.662] GetLastError () returned 0x0
	[0055.662] ReadFile (in: hFile=0x1f4, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0xffff0, lpOverlapped=0x0) returned 1
	[0055.947] WriteFile (in: hFile=0x1dc, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xffff0, lpOverlapped=0x0) returned 1
	[0056.213] ReadFile (in: hFile=0x1f4, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x407a0, lpOverlapped=0x0) returned 1
	[0056.226] WriteFile (in: hFile=0x1dc, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x407b0, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x407b0, lpOverlapped=0x0) returned 1
	[0056.234] ReadFile (in: hFile=0x1f4, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0056.234] WriteFile (in: hFile=0x1dc, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0056.234] SetEndOfFile (hFile=0x1dc) returned 1
	[0056.234] CloseHandle (hObject=0x1dc) returned 1
	[0056.234] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0056.234] SetEndOfFile (hFile=0x1f4) returned 1
	[0056.237] CloseHandle (hObject=0x1f4) returned 1
	[0056.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0056.238] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll")) returned 1
	[0056.238] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66
	[0056.238] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66
	[0056.238] lstrlenW (lpString=".doc") returned 4
	[0056.238] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0056.238] lstrlenW (lpString=".docx") returned 5
	[0056.238] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0056.238] lstrlenW (lpString=".pdf") returned 4
	[0056.238] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0056.238] lstrlenW (lpString=".xls") returned 4
	[0056.238] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0056.238] lstrlenW (lpString=".xlsx") returned 5
	[0056.238] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0056.238] lstrlenW (lpString=".ppt") returned 4
	[0056.238] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0056.238] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66
	[0056.238] lstrlenW (lpString=".zip") returned 4
	[0056.238] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0056.238] lstrlenW (lpString=".rar") returned 4
	[0056.238] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0056.238] lstrlenW (lpString=".bz2") returned 4
	[0056.238] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0056.238] lstrlenW (lpString=".7z") returned 3
	[0056.238] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0056.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66
	[0056.239] lstrlenW (lpString=".dbf") returned 4
	[0056.239] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0056.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66
	[0056.239] lstrlenW (lpString=".1cd") returned 4
	[0056.239] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0056.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66
	[0056.239] lstrlenW (lpString=".jpg") returned 4
	[0056.239] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0056.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66
	[0056.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66
	[0056.239] lstrlenW (lpString=".doc") returned 4
	[0056.239] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0056.239] lstrlenW (lpString=".docx") returned 5
	[0056.239] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0056.239] lstrlenW (lpString=".pdf") returned 4
	[0056.239] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0056.239] lstrlenW (lpString=".xls") returned 4
	[0056.239] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0056.239] lstrlenW (lpString=".xlsx") returned 5
	[0056.239] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0056.239] lstrlenW (lpString=".ppt") returned 4
	[0056.239] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0056.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66
	[0056.239] lstrlenW (lpString=".zip") returned 4
	[0056.239] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0056.239] lstrlenW (lpString=".rar") returned 4
	[0056.239] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0056.239] lstrlenW (lpString=".bz2") returned 4
	[0056.239] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0056.239] lstrlenW (lpString=".7z") returned 3
	[0056.239] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0056.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66
	[0056.240] lstrlenW (lpString=".dbf") returned 4
	[0056.240] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0056.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66
	[0056.240] lstrlenW (lpString=".1cd") returned 4
	[0056.240] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0056.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll") returned 66
	[0056.240] lstrlenW (lpString=".jpg") returned 4
	[0056.240] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0056.240] lstrcmpiW (lpString1=".FLT", lpString2=".beets") returned 1
	[0056.240] lstrlenW (lpString="GIFIMP32.FLT") returned 12
	[0056.240] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0057.307] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=320384) returned 1
	[0057.307] CloseHandle (hObject=0x214) returned 1
	[0057.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt")) returned 0x20
	[0057.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0057.307] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0057.307] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.307] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.307] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0057.307] GetLastError () returned 0x0
	[0057.307] ReadFile (in: hFile=0x214, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x4e380, lpOverlapped=0x0) returned 1
	[0057.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x4e390, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x4e390, lpOverlapped=0x0) returned 1
	[0057.322] ReadFile (in: hFile=0x214, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.322] SetEndOfFile (hFile=0x1ec) returned 1
	[0057.322] CloseHandle (hObject=0x1ec) returned 1
	[0057.322] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.323] SetEndOfFile (hFile=0x214) returned 1
	[0057.326] CloseHandle (hObject=0x214) returned 1
	[0057.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.326] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt")) returned 1
	[0057.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67
	[0057.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67
	[0057.326] lstrlenW (lpString=".doc") returned 4
	[0057.326] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0057.326] lstrlenW (lpString=".docx") returned 5
	[0057.326] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0057.326] lstrlenW (lpString=".pdf") returned 4
	[0057.326] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0057.326] lstrlenW (lpString=".xls") returned 4
	[0057.326] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0057.326] lstrlenW (lpString=".xlsx") returned 5
	[0057.326] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0057.326] lstrlenW (lpString=".ppt") returned 4
	[0057.326] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0057.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67
	[0057.326] lstrlenW (lpString=".zip") returned 4
	[0057.327] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0057.327] lstrlenW (lpString=".rar") returned 4
	[0057.327] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0057.327] lstrlenW (lpString=".bz2") returned 4
	[0057.327] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0057.327] lstrlenW (lpString=".7z") returned 3
	[0057.327] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0057.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67
	[0057.327] lstrlenW (lpString=".dbf") returned 4
	[0057.327] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0057.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67
	[0057.327] lstrlenW (lpString=".1cd") returned 4
	[0057.327] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0057.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67
	[0057.327] lstrlenW (lpString=".jpg") returned 4
	[0057.327] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0057.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67
	[0057.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67
	[0057.327] lstrlenW (lpString=".doc") returned 4
	[0057.327] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0057.327] lstrlenW (lpString=".docx") returned 5
	[0057.327] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0057.327] lstrlenW (lpString=".pdf") returned 4
	[0057.327] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0057.327] lstrlenW (lpString=".xls") returned 4
	[0057.327] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0057.327] lstrlenW (lpString=".xlsx") returned 5
	[0057.327] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0057.327] lstrlenW (lpString=".ppt") returned 4
	[0057.327] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0057.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67
	[0057.328] lstrlenW (lpString=".zip") returned 4
	[0057.328] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0057.328] lstrlenW (lpString=".rar") returned 4
	[0057.328] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0057.328] lstrlenW (lpString=".bz2") returned 4
	[0057.328] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0057.328] lstrlenW (lpString=".7z") returned 3
	[0057.328] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0057.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67
	[0057.328] lstrlenW (lpString=".dbf") returned 4
	[0057.328] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0057.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67
	[0057.328] lstrlenW (lpString=".1cd") returned 4
	[0057.328] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0057.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT") returned 67
	[0057.328] lstrlenW (lpString=".jpg") returned 4
	[0057.328] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0057.328] lstrcmpiW (lpString1=".CGM", lpString2=".beets") returned 1
	[0057.328] lstrlenW (lpString="MS.CGM") returned 6
	[0057.328] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0057.329] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=1908) returned 1
	[0057.329] CloseHandle (hObject=0x214) returned 1
	[0057.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm")) returned 0x20
	[0057.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0057.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0057.329] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.329] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0057.329] GetLastError () returned 0x0
	[0057.329] ReadFile (in: hFile=0x214, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x774, lpOverlapped=0x0) returned 1
	[0057.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x780, lpOverlapped=0x0) returned 1
	[0057.332] ReadFile (in: hFile=0x214, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xe0, lpOverlapped=0x0) returned 1
	[0057.332] SetEndOfFile (hFile=0x1ec) returned 1
	[0057.332] CloseHandle (hObject=0x1ec) returned 1
	[0057.332] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.332] SetEndOfFile (hFile=0x214) returned 1
	[0057.333] CloseHandle (hObject=0x214) returned 1
	[0057.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.333] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm")) returned 1
	[0057.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61
	[0057.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61
	[0057.334] lstrlenW (lpString=".doc") returned 4
	[0057.334] lstrcmpiW (lpString1=".doc", lpString2=".CGM") returned 1
	[0057.334] lstrlenW (lpString=".docx") returned 5
	[0057.334] lstrcmpiW (lpString1=".docx", lpString2="S.CGM") returned -1
	[0057.334] lstrlenW (lpString=".pdf") returned 4
	[0057.334] lstrcmpiW (lpString1=".pdf", lpString2=".CGM") returned 1
	[0057.334] lstrlenW (lpString=".xls") returned 4
	[0057.334] lstrcmpiW (lpString1=".xls", lpString2=".CGM") returned 1
	[0057.334] lstrlenW (lpString=".xlsx") returned 5
	[0057.334] lstrcmpiW (lpString1=".xlsx", lpString2="S.CGM") returned -1
	[0057.334] lstrlenW (lpString=".ppt") returned 4
	[0057.334] lstrcmpiW (lpString1=".ppt", lpString2=".CGM") returned 1
	[0057.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61
	[0057.334] lstrlenW (lpString=".zip") returned 4
	[0057.334] lstrcmpiW (lpString1=".zip", lpString2=".CGM") returned 1
	[0057.334] lstrlenW (lpString=".rar") returned 4
	[0057.334] lstrcmpiW (lpString1=".rar", lpString2=".CGM") returned 1
	[0057.334] lstrlenW (lpString=".bz2") returned 4
	[0057.334] lstrcmpiW (lpString1=".bz2", lpString2=".CGM") returned -1
	[0057.334] lstrlenW (lpString=".7z") returned 3
	[0057.334] lstrcmpiW (lpString1=".7z", lpString2="CGM") returned -1
	[0057.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61
	[0057.334] lstrlenW (lpString=".dbf") returned 4
	[0057.334] lstrcmpiW (lpString1=".dbf", lpString2=".CGM") returned 1
	[0057.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61
	[0057.334] lstrlenW (lpString=".1cd") returned 4
	[0057.334] lstrcmpiW (lpString1=".1cd", lpString2=".CGM") returned -1
	[0057.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61
	[0057.334] lstrlenW (lpString=".jpg") returned 4
	[0057.335] lstrcmpiW (lpString1=".jpg", lpString2=".CGM") returned 1
	[0057.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61
	[0057.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61
	[0057.335] lstrlenW (lpString=".doc") returned 4
	[0057.335] lstrcmpiW (lpString1=".doc", lpString2=".CGM") returned 1
	[0057.335] lstrlenW (lpString=".docx") returned 5
	[0057.335] lstrcmpiW (lpString1=".docx", lpString2="S.CGM") returned -1
	[0057.335] lstrlenW (lpString=".pdf") returned 4
	[0057.335] lstrcmpiW (lpString1=".pdf", lpString2=".CGM") returned 1
	[0057.335] lstrlenW (lpString=".xls") returned 4
	[0057.335] lstrcmpiW (lpString1=".xls", lpString2=".CGM") returned 1
	[0057.335] lstrlenW (lpString=".xlsx") returned 5
	[0057.335] lstrcmpiW (lpString1=".xlsx", lpString2="S.CGM") returned -1
	[0057.335] lstrlenW (lpString=".ppt") returned 4
	[0057.335] lstrcmpiW (lpString1=".ppt", lpString2=".CGM") returned 1
	[0057.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61
	[0057.335] lstrlenW (lpString=".zip") returned 4
	[0057.335] lstrcmpiW (lpString1=".zip", lpString2=".CGM") returned 1
	[0057.335] lstrlenW (lpString=".rar") returned 4
	[0057.335] lstrcmpiW (lpString1=".rar", lpString2=".CGM") returned 1
	[0057.335] lstrlenW (lpString=".bz2") returned 4
	[0057.335] lstrcmpiW (lpString1=".bz2", lpString2=".CGM") returned -1
	[0057.335] lstrlenW (lpString=".7z") returned 3
	[0057.335] lstrcmpiW (lpString1=".7z", lpString2="CGM") returned -1
	[0057.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61
	[0057.335] lstrlenW (lpString=".dbf") returned 4
	[0057.335] lstrcmpiW (lpString1=".dbf", lpString2=".CGM") returned 1
	[0057.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61
	[0057.335] lstrlenW (lpString=".1cd") returned 4
	[0057.335] lstrcmpiW (lpString1=".1cd", lpString2=".CGM") returned -1
	[0057.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM") returned 61
	[0057.335] lstrlenW (lpString=".jpg") returned 4
	[0057.336] lstrcmpiW (lpString1=".jpg", lpString2=".CGM") returned 1
	[0057.336] lstrcmpiW (lpString1=".WPG", lpString2=".beets") returned 1
	[0057.336] lstrlenW (lpString="MS.WPG") returned 6
	[0057.336] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0057.336] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=1382) returned 1
	[0057.336] CloseHandle (hObject=0x214) returned 1
	[0057.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg")) returned 0x20
	[0057.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0057.336] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0057.336] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.336] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.337] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0057.337] GetLastError () returned 0x0
	[0057.337] ReadFile (in: hFile=0x214, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x566, lpOverlapped=0x0) returned 1
	[0057.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x570, lpOverlapped=0x0) returned 1
	[0057.340] ReadFile (in: hFile=0x214, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xe0, lpOverlapped=0x0) returned 1
	[0057.340] SetEndOfFile (hFile=0x1ec) returned 1
	[0057.477] CloseHandle (hObject=0x1ec) returned 1
	[0057.478] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.478] SetEndOfFile (hFile=0x214) returned 1
	[0057.603] CloseHandle (hObject=0x214) returned 1
	[0057.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.634] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg")) returned 1
	[0057.634] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61
	[0057.634] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61
	[0057.634] lstrlenW (lpString=".doc") returned 4
	[0057.634] lstrcmpiW (lpString1=".doc", lpString2=".WPG") returned -1
	[0057.634] lstrlenW (lpString=".docx") returned 5
	[0057.634] lstrcmpiW (lpString1=".docx", lpString2="S.WPG") returned -1
	[0057.634] lstrlenW (lpString=".pdf") returned 4
	[0057.634] lstrcmpiW (lpString1=".pdf", lpString2=".WPG") returned -1
	[0057.634] lstrlenW (lpString=".xls") returned 4
	[0057.634] lstrcmpiW (lpString1=".xls", lpString2=".WPG") returned 1
	[0057.635] lstrlenW (lpString=".xlsx") returned 5
	[0057.635] lstrcmpiW (lpString1=".xlsx", lpString2="S.WPG") returned -1
	[0057.635] lstrlenW (lpString=".ppt") returned 4
	[0057.635] lstrcmpiW (lpString1=".ppt", lpString2=".WPG") returned -1
	[0057.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61
	[0057.635] lstrlenW (lpString=".zip") returned 4
	[0057.635] lstrcmpiW (lpString1=".zip", lpString2=".WPG") returned 1
	[0057.635] lstrlenW (lpString=".rar") returned 4
	[0057.635] lstrcmpiW (lpString1=".rar", lpString2=".WPG") returned -1
	[0057.635] lstrlenW (lpString=".bz2") returned 4
	[0057.635] lstrcmpiW (lpString1=".bz2", lpString2=".WPG") returned -1
	[0057.635] lstrlenW (lpString=".7z") returned 3
	[0057.635] lstrcmpiW (lpString1=".7z", lpString2="WPG") returned -1
	[0057.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61
	[0057.635] lstrlenW (lpString=".dbf") returned 4
	[0057.635] lstrcmpiW (lpString1=".dbf", lpString2=".WPG") returned -1
	[0057.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61
	[0057.635] lstrlenW (lpString=".1cd") returned 4
	[0057.635] lstrcmpiW (lpString1=".1cd", lpString2=".WPG") returned -1
	[0057.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61
	[0057.635] lstrlenW (lpString=".jpg") returned 4
	[0057.635] lstrcmpiW (lpString1=".jpg", lpString2=".WPG") returned -1
	[0057.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61
	[0057.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61
	[0057.635] lstrlenW (lpString=".doc") returned 4
	[0057.635] lstrcmpiW (lpString1=".doc", lpString2=".WPG") returned -1
	[0057.635] lstrlenW (lpString=".docx") returned 5
	[0057.635] lstrcmpiW (lpString1=".docx", lpString2="S.WPG") returned -1
	[0057.635] lstrlenW (lpString=".pdf") returned 4
	[0057.635] lstrcmpiW (lpString1=".pdf", lpString2=".WPG") returned -1
	[0057.635] lstrlenW (lpString=".xls") returned 4
	[0057.635] lstrcmpiW (lpString1=".xls", lpString2=".WPG") returned 1
	[0057.636] lstrlenW (lpString=".xlsx") returned 5
	[0057.636] lstrcmpiW (lpString1=".xlsx", lpString2="S.WPG") returned -1
	[0057.636] lstrlenW (lpString=".ppt") returned 4
	[0057.636] lstrcmpiW (lpString1=".ppt", lpString2=".WPG") returned -1
	[0057.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61
	[0057.636] lstrlenW (lpString=".zip") returned 4
	[0057.636] lstrcmpiW (lpString1=".zip", lpString2=".WPG") returned 1
	[0057.636] lstrlenW (lpString=".rar") returned 4
	[0057.636] lstrcmpiW (lpString1=".rar", lpString2=".WPG") returned -1
	[0057.636] lstrlenW (lpString=".bz2") returned 4
	[0057.636] lstrcmpiW (lpString1=".bz2", lpString2=".WPG") returned -1
	[0057.636] lstrlenW (lpString=".7z") returned 3
	[0057.636] lstrcmpiW (lpString1=".7z", lpString2="WPG") returned -1
	[0057.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61
	[0057.636] lstrlenW (lpString=".dbf") returned 4
	[0057.636] lstrcmpiW (lpString1=".dbf", lpString2=".WPG") returned -1
	[0057.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61
	[0057.636] lstrlenW (lpString=".1cd") returned 4
	[0057.636] lstrcmpiW (lpString1=".1cd", lpString2=".WPG") returned -1
	[0057.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG") returned 61
	[0057.636] lstrlenW (lpString=".jpg") returned 4
	[0057.636] lstrcmpiW (lpString1=".jpg", lpString2=".WPG") returned -1
	[0057.636] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0057.636] lstrlenW (lpString="ITIRCL55.DLL") returned 12
	[0057.636] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0057.637] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=1831424) returned 1
	[0057.637] CloseHandle (hObject=0x214) returned 1
	[0057.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll")) returned 0x20
	[0057.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0057.637] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0059.006] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0059.006] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0059.006] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0059.006] ReadFile (in: hFile=0x214, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0059.010] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x950aa, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0059.010] ReadFile (in: hFile=0x214, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0059.017] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0059.017] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x17f200, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0059.018] ReadFile (in: hFile=0x214, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0059.034] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.034] WriteFile (in: hFile=0x214, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0059.261] SetEndOfFile (hFile=0x214) returned 1
	[0059.262] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d3d110
	[0059.265] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0059.265] WriteFile (in: hFile=0x214, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0059.266] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x950aa, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0059.266] WriteFile (in: hFile=0x214, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0059.268] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x17f200, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0059.268] WriteFile (in: hFile=0x214, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0059.270] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d3d110 | out: hHeap=0x5350000) returned 1
	[0059.270] CloseHandle (hObject=0x214) returned 1
	[0059.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0059.270] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64
	[0059.270] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64
	[0059.270] lstrlenW (lpString=".doc") returned 4
	[0059.271] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0059.271] lstrlenW (lpString=".docx") returned 5
	[0059.271] lstrcmpiW (lpString1=".docx", lpString2="5.DLL") returned -1
	[0059.271] lstrlenW (lpString=".pdf") returned 4
	[0059.271] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0059.271] lstrlenW (lpString=".xls") returned 4
	[0059.271] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0059.271] lstrlenW (lpString=".xlsx") returned 5
	[0059.271] lstrcmpiW (lpString1=".xlsx", lpString2="5.DLL") returned -1
	[0059.271] lstrlenW (lpString=".ppt") returned 4
	[0059.271] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0059.271] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64
	[0059.271] lstrlenW (lpString=".zip") returned 4
	[0059.271] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0059.271] lstrlenW (lpString=".rar") returned 4
	[0059.271] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0059.271] lstrlenW (lpString=".bz2") returned 4
	[0059.271] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0059.271] lstrlenW (lpString=".7z") returned 3
	[0059.271] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.271] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64
	[0059.271] lstrlenW (lpString=".dbf") returned 4
	[0059.271] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0059.271] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64
	[0059.271] lstrlenW (lpString=".1cd") returned 4
	[0059.271] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0059.271] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64
	[0059.271] lstrlenW (lpString=".jpg") returned 4
	[0059.271] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0059.271] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64
	[0059.271] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64
	[0059.271] lstrlenW (lpString=".doc") returned 4
	[0059.271] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0059.272] lstrlenW (lpString=".docx") returned 5
	[0059.272] lstrcmpiW (lpString1=".docx", lpString2="5.DLL") returned -1
	[0059.272] lstrlenW (lpString=".pdf") returned 4
	[0059.272] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0059.272] lstrlenW (lpString=".xls") returned 4
	[0059.272] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0059.272] lstrlenW (lpString=".xlsx") returned 5
	[0059.272] lstrcmpiW (lpString1=".xlsx", lpString2="5.DLL") returned -1
	[0059.272] lstrlenW (lpString=".ppt") returned 4
	[0059.272] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0059.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64
	[0059.272] lstrlenW (lpString=".zip") returned 4
	[0059.272] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0059.272] lstrlenW (lpString=".rar") returned 4
	[0059.272] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0059.272] lstrlenW (lpString=".bz2") returned 4
	[0059.272] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0059.272] lstrlenW (lpString=".7z") returned 3
	[0059.272] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64
	[0059.272] lstrlenW (lpString=".dbf") returned 4
	[0059.272] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0059.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64
	[0059.272] lstrlenW (lpString=".1cd") returned 4
	[0059.272] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0059.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL") returned 64
	[0059.272] lstrlenW (lpString=".jpg") returned 4
	[0059.272] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0059.272] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0059.273] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0059.273] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0059.479] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=3584) returned 1
	[0059.479] CloseHandle (hObject=0x214) returned 1
	[0059.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20
	[0059.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.480] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui") returned 72
	[0059.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui") returned 72
	[0059.480] lstrlenW (lpString=".doc") returned 4
	[0059.480] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.480] lstrlenW (lpString=".docx") returned 5
	[0059.480] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.480] lstrlenW (lpString=".pdf") returned 4
	[0059.480] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.480] lstrlenW (lpString=".xls") returned 4
	[0059.480] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.480] lstrlenW (lpString=".xlsx") returned 5
	[0059.480] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.480] lstrlenW (lpString=".ppt") returned 4
	[0059.480] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui") returned 72
	[0059.480] lstrlenW (lpString=".zip") returned 4
	[0059.480] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.480] lstrlenW (lpString=".rar") returned 4
	[0059.480] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.480] lstrlenW (lpString=".bz2") returned 4
	[0059.480] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.480] lstrlenW (lpString=".7z") returned 3
	[0059.480] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui") returned 72
	[0059.480] lstrlenW (lpString=".dbf") returned 4
	[0059.480] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.480] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui") returned 72
	[0059.480] lstrlenW (lpString=".1cd") returned 4
	[0059.480] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.481] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui") returned 72
	[0059.481] lstrlenW (lpString=".jpg") returned 4
	[0059.481] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.481] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui") returned 72
	[0059.481] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui") returned 72
	[0059.481] lstrlenW (lpString=".doc") returned 4
	[0059.481] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.481] lstrlenW (lpString=".docx") returned 5
	[0059.481] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.481] lstrlenW (lpString=".pdf") returned 4
	[0059.481] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.481] lstrlenW (lpString=".xls") returned 4
	[0059.481] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.481] lstrlenW (lpString=".xlsx") returned 5
	[0059.481] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.481] lstrlenW (lpString=".ppt") returned 4
	[0059.481] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.481] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui") returned 72
	[0059.481] lstrlenW (lpString=".zip") returned 4
	[0059.481] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.481] lstrlenW (lpString=".rar") returned 4
	[0059.481] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.481] lstrlenW (lpString=".bz2") returned 4
	[0059.481] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.481] lstrlenW (lpString=".7z") returned 3
	[0059.481] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.481] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui") returned 72
	[0059.481] lstrlenW (lpString=".dbf") returned 4
	[0059.481] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.481] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui") returned 72
	[0059.481] lstrlenW (lpString=".1cd") returned 4
	[0059.481] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.482] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui") returned 72
	[0059.482] lstrlenW (lpString=".jpg") returned 4
	[0059.482] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.482] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0059.482] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0059.482] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0059.482] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=3584) returned 1
	[0059.482] CloseHandle (hObject=0x214) returned 1
	[0059.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20
	[0059.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.483] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui") returned 72
	[0059.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui") returned 72
	[0059.483] lstrlenW (lpString=".doc") returned 4
	[0059.483] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.483] lstrlenW (lpString=".docx") returned 5
	[0059.483] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.483] lstrlenW (lpString=".pdf") returned 4
	[0059.483] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.483] lstrlenW (lpString=".xls") returned 4
	[0059.483] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.483] lstrlenW (lpString=".xlsx") returned 5
	[0059.483] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.483] lstrlenW (lpString=".ppt") returned 4
	[0059.483] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.483] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui") returned 72
	[0059.483] lstrlenW (lpString=".zip") returned 4
	[0059.483] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.483] lstrlenW (lpString=".rar") returned 4
	[0059.483] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.483] lstrlenW (lpString=".bz2") returned 4
	[0059.484] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.484] lstrlenW (lpString=".7z") returned 3
	[0059.484] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui") returned 72
	[0059.484] lstrlenW (lpString=".dbf") returned 4
	[0059.484] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui") returned 72
	[0059.484] lstrlenW (lpString=".1cd") returned 4
	[0059.484] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui") returned 72
	[0059.484] lstrlenW (lpString=".jpg") returned 4
	[0059.484] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui") returned 72
	[0059.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui") returned 72
	[0059.484] lstrlenW (lpString=".doc") returned 4
	[0059.484] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.484] lstrlenW (lpString=".docx") returned 5
	[0059.484] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.484] lstrlenW (lpString=".pdf") returned 4
	[0059.484] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.484] lstrlenW (lpString=".xls") returned 4
	[0059.484] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.484] lstrlenW (lpString=".xlsx") returned 5
	[0059.484] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.484] lstrlenW (lpString=".ppt") returned 4
	[0059.484] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui") returned 72
	[0059.484] lstrlenW (lpString=".zip") returned 4
	[0059.484] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.484] lstrlenW (lpString=".rar") returned 4
	[0059.484] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.484] lstrlenW (lpString=".bz2") returned 4
	[0059.485] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.485] lstrlenW (lpString=".7z") returned 3
	[0059.485] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui") returned 72
	[0059.485] lstrlenW (lpString=".dbf") returned 4
	[0059.485] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui") returned 72
	[0059.485] lstrlenW (lpString=".1cd") returned 4
	[0059.485] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui") returned 72
	[0059.485] lstrlenW (lpString=".jpg") returned 4
	[0059.485] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.485] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0059.485] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0059.485] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0059.486] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=3584) returned 1
	[0059.486] CloseHandle (hObject=0x214) returned 1
	[0059.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui")) returned 0x20
	[0059.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.486] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.486] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned 77
	[0059.486] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned 77
	[0059.486] lstrlenW (lpString=".doc") returned 4
	[0059.486] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.486] lstrlenW (lpString=".docx") returned 5
	[0059.486] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.486] lstrlenW (lpString=".pdf") returned 4
	[0059.486] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.486] lstrlenW (lpString=".xls") returned 4
	[0059.486] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.486] lstrlenW (lpString=".xlsx") returned 5
	[0059.486] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.486] lstrlenW (lpString=".ppt") returned 4
	[0059.486] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.486] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned 77
	[0059.487] lstrlenW (lpString=".zip") returned 4
	[0059.487] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.487] lstrlenW (lpString=".rar") returned 4
	[0059.487] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.487] lstrlenW (lpString=".bz2") returned 4
	[0059.487] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.487] lstrlenW (lpString=".7z") returned 3
	[0059.487] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned 77
	[0059.487] lstrlenW (lpString=".dbf") returned 4
	[0059.487] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned 77
	[0059.487] lstrlenW (lpString=".1cd") returned 4
	[0059.487] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned 77
	[0059.487] lstrlenW (lpString=".jpg") returned 4
	[0059.487] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned 77
	[0059.487] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned 77
	[0059.487] lstrlenW (lpString=".doc") returned 4
	[0059.487] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.487] lstrlenW (lpString=".docx") returned 5
	[0059.487] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.487] lstrlenW (lpString=".pdf") returned 4
	[0059.487] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.487] lstrlenW (lpString=".xls") returned 4
	[0059.487] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.487] lstrlenW (lpString=".xlsx") returned 5
	[0059.487] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.487] lstrlenW (lpString=".ppt") returned 4
	[0059.487] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned 77
	[0059.488] lstrlenW (lpString=".zip") returned 4
	[0059.488] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.488] lstrlenW (lpString=".rar") returned 4
	[0059.488] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.488] lstrlenW (lpString=".bz2") returned 4
	[0059.488] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.488] lstrlenW (lpString=".7z") returned 3
	[0059.488] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned 77
	[0059.488] lstrlenW (lpString=".dbf") returned 4
	[0059.488] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned 77
	[0059.488] lstrlenW (lpString=".1cd") returned 4
	[0059.488] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned 77
	[0059.488] lstrlenW (lpString=".jpg") returned 4
	[0059.488] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.488] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0059.488] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0059.488] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0059.489] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=3584) returned 1
	[0059.489] CloseHandle (hObject=0x214) returned 1
	[0059.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20
	[0059.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.490] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.490] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui") returned 72
	[0059.490] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui") returned 72
	[0059.490] lstrlenW (lpString=".doc") returned 4
	[0059.490] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.490] lstrlenW (lpString=".docx") returned 5
	[0059.490] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.490] lstrlenW (lpString=".pdf") returned 4
	[0059.490] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.490] lstrlenW (lpString=".xls") returned 4
	[0059.490] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.490] lstrlenW (lpString=".xlsx") returned 5
	[0059.490] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.490] lstrlenW (lpString=".ppt") returned 4
	[0059.490] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.490] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui") returned 72
	[0059.490] lstrlenW (lpString=".zip") returned 4
	[0059.490] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.490] lstrlenW (lpString=".rar") returned 4
	[0059.490] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.490] lstrlenW (lpString=".bz2") returned 4
	[0059.491] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.491] lstrlenW (lpString=".7z") returned 3
	[0059.491] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.491] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui") returned 72
	[0059.491] lstrlenW (lpString=".dbf") returned 4
	[0059.491] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.491] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui") returned 72
	[0059.491] lstrlenW (lpString=".1cd") returned 4
	[0059.491] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.491] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui") returned 72
	[0059.491] lstrlenW (lpString=".jpg") returned 4
	[0059.491] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.491] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui") returned 72
	[0059.491] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui") returned 72
	[0059.491] lstrlenW (lpString=".doc") returned 4
	[0059.491] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.491] lstrlenW (lpString=".docx") returned 5
	[0059.491] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.491] lstrlenW (lpString=".pdf") returned 4
	[0059.491] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.491] lstrlenW (lpString=".xls") returned 4
	[0059.491] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.491] lstrlenW (lpString=".xlsx") returned 5
	[0059.491] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.491] lstrlenW (lpString=".ppt") returned 4
	[0059.491] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.491] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui") returned 72
	[0059.491] lstrlenW (lpString=".zip") returned 4
	[0059.491] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.491] lstrlenW (lpString=".rar") returned 4
	[0059.491] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.491] lstrlenW (lpString=".bz2") returned 4
	[0059.491] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.492] lstrlenW (lpString=".7z") returned 3
	[0059.492] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.492] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui") returned 72
	[0059.492] lstrlenW (lpString=".dbf") returned 4
	[0059.492] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.492] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui") returned 72
	[0059.492] lstrlenW (lpString=".1cd") returned 4
	[0059.492] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.492] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui") returned 72
	[0059.492] lstrlenW (lpString=".jpg") returned 4
	[0059.492] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.492] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0059.492] lstrlenW (lpString="TabIpsps.dll") returned 12
	[0059.492] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0059.492] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=40448) returned 1
	[0059.492] CloseHandle (hObject=0x214) returned 1
	[0059.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20
	[0059.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.493] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.493] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll") returned 63
	[0059.493] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll") returned 63
	[0059.493] lstrlenW (lpString=".doc") returned 4
	[0059.493] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0059.493] lstrlenW (lpString=".docx") returned 5
	[0059.493] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0059.493] lstrlenW (lpString=".pdf") returned 4
	[0059.493] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0059.493] lstrlenW (lpString=".xls") returned 4
	[0059.493] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0059.493] lstrlenW (lpString=".xlsx") returned 5
	[0059.493] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0059.493] lstrlenW (lpString=".ppt") returned 4
	[0059.493] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0059.493] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll") returned 63
	[0059.493] lstrlenW (lpString=".zip") returned 4
	[0059.493] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0059.493] lstrlenW (lpString=".rar") returned 4
	[0059.493] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0059.493] lstrlenW (lpString=".bz2") returned 4
	[0059.494] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0059.494] lstrlenW (lpString=".7z") returned 3
	[0059.494] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0059.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll") returned 63
	[0059.494] lstrlenW (lpString=".dbf") returned 4
	[0059.494] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0059.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll") returned 63
	[0059.494] lstrlenW (lpString=".1cd") returned 4
	[0059.494] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0059.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll") returned 63
	[0059.494] lstrlenW (lpString=".jpg") returned 4
	[0059.494] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0059.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll") returned 63
	[0059.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll") returned 63
	[0059.494] lstrlenW (lpString=".doc") returned 4
	[0059.494] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0059.494] lstrlenW (lpString=".docx") returned 5
	[0059.494] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0059.494] lstrlenW (lpString=".pdf") returned 4
	[0059.494] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0059.494] lstrlenW (lpString=".xls") returned 4
	[0059.494] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0059.494] lstrlenW (lpString=".xlsx") returned 5
	[0059.494] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0059.494] lstrlenW (lpString=".ppt") returned 4
	[0059.494] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0059.494] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll") returned 63
	[0059.494] lstrlenW (lpString=".zip") returned 4
	[0059.494] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0059.494] lstrlenW (lpString=".rar") returned 4
	[0059.494] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0059.494] lstrlenW (lpString=".bz2") returned 4
	[0059.494] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0059.495] lstrlenW (lpString=".7z") returned 3
	[0059.495] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0059.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll") returned 63
	[0059.495] lstrlenW (lpString=".dbf") returned 4
	[0059.495] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0059.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll") returned 63
	[0059.495] lstrlenW (lpString=".1cd") returned 4
	[0059.495] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0059.495] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll") returned 63
	[0059.495] lstrlenW (lpString=".jpg") returned 4
	[0059.495] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0059.495] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0059.495] lstrlenW (lpString="tabskb.dll") returned 10
	[0059.495] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0059.495] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=448000) returned 1
	[0059.495] CloseHandle (hObject=0x214) returned 1
	[0059.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0x20
	[0059.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.496] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.496] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll") returned 61
	[0059.496] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll") returned 61
	[0059.496] lstrlenW (lpString=".doc") returned 4
	[0059.496] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0059.496] lstrlenW (lpString=".docx") returned 5
	[0059.496] lstrcmpiW (lpString1=".docx", lpString2="b.dll") returned -1
	[0059.496] lstrlenW (lpString=".pdf") returned 4
	[0059.496] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0059.496] lstrlenW (lpString=".xls") returned 4
	[0059.496] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0059.496] lstrlenW (lpString=".xlsx") returned 5
	[0059.497] lstrcmpiW (lpString1=".xlsx", lpString2="b.dll") returned -1
	[0059.497] lstrlenW (lpString=".ppt") returned 4
	[0059.497] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0059.497] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll") returned 61
	[0059.497] lstrlenW (lpString=".zip") returned 4
	[0059.497] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0059.497] lstrlenW (lpString=".rar") returned 4
	[0059.497] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0059.497] lstrlenW (lpString=".bz2") returned 4
	[0059.497] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0059.497] lstrlenW (lpString=".7z") returned 3
	[0059.497] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0059.497] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll") returned 61
	[0059.497] lstrlenW (lpString=".dbf") returned 4
	[0059.497] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0059.561] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.562] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.562] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0059.562] GetLastError () returned 0x0
	[0059.562] ReadFile (in: hFile=0x224, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x51d0, lpOverlapped=0x0) returned 1
	[0059.589] WriteFile (in: hFile=0x21c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x51e0, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x51e0, lpOverlapped=0x0) returned 1
	[0059.591] ReadFile (in: hFile=0x224, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0059.591] WriteFile (in: hFile=0x21c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0059.591] SetEndOfFile (hFile=0x21c) returned 1
	[0059.591] CloseHandle (hObject=0x21c) returned 1
	[0059.591] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.591] SetEndOfFile (hFile=0x224) returned 1
	[0059.592] CloseHandle (hObject=0x224) returned 1
	[0059.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0059.592] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll")) returned 1
	[0059.593] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL") returned 72
	[0059.593] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL") returned 72
	[0059.593] lstrlenW (lpString=".doc") returned 4
	[0059.593] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0059.593] lstrlenW (lpString=".docx") returned 5
	[0059.593] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1
	[0059.593] lstrlenW (lpString=".pdf") returned 4
	[0059.593] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0059.593] lstrlenW (lpString=".xls") returned 4
	[0059.593] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0059.593] lstrlenW (lpString=".xlsx") returned 5
	[0059.593] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1
	[0059.593] lstrlenW (lpString=".ppt") returned 4
	[0059.593] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0059.593] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL") returned 72
	[0059.593] lstrlenW (lpString=".zip") returned 4
	[0059.593] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0059.593] lstrlenW (lpString=".rar") returned 4
	[0059.593] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0059.593] lstrlenW (lpString=".bz2") returned 4
	[0059.593] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0059.593] lstrlenW (lpString=".7z") returned 3
	[0059.593] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.593] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL") returned 72
	[0059.593] lstrlenW (lpString=".dbf") returned 4
	[0059.593] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0059.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL") returned 72
	[0059.594] lstrlenW (lpString=".1cd") returned 4
	[0059.594] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0059.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL") returned 72
	[0059.594] lstrlenW (lpString=".jpg") returned 4
	[0059.594] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0059.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL") returned 72
	[0059.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL") returned 72
	[0059.594] lstrlenW (lpString=".doc") returned 4
	[0059.594] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0059.594] lstrlenW (lpString=".docx") returned 5
	[0059.594] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1
	[0059.594] lstrlenW (lpString=".pdf") returned 4
	[0059.594] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0059.594] lstrlenW (lpString=".xls") returned 4
	[0059.594] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0059.594] lstrlenW (lpString=".xlsx") returned 5
	[0059.594] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1
	[0059.594] lstrlenW (lpString=".ppt") returned 4
	[0059.594] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0059.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL") returned 72
	[0059.594] lstrlenW (lpString=".zip") returned 4
	[0059.594] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0059.594] lstrlenW (lpString=".rar") returned 4
	[0059.594] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0059.594] lstrlenW (lpString=".bz2") returned 4
	[0059.594] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0059.594] lstrlenW (lpString=".7z") returned 3
	[0059.594] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.594] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL") returned 72
	[0059.594] lstrlenW (lpString=".dbf") returned 4
	[0059.595] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0059.595] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL") returned 72
	[0059.595] lstrlenW (lpString=".1cd") returned 4
	[0059.595] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0059.595] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL") returned 72
	[0059.595] lstrlenW (lpString=".jpg") returned 4
	[0059.595] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0059.595] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0059.595] lstrlenW (lpString="MSOINTL.DLL") returned 11
	[0059.595] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0059.595] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=2528128) returned 1
	[0059.595] CloseHandle (hObject=0x224) returned 1
	[0059.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll")) returned 0x20
	[0059.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.596] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0059.596] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0059.596] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0x0) returned 1
	[0059.596] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0059.597] ReadFile (in: hFile=0x224, lpBuffer=0x8a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a30058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0059.629] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xcdbd5, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0059.629] ReadFile (in: hFile=0x224, lpBuffer=0x8a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a70058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0060.454] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x812fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0060.454] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x229380, lpNewFilePointer=0x0, dwMoveMethod=0x812fc2c | out: lpNewFilePointer=0x0) returned 1
	[0060.454] ReadFile (in: hFile=0x224, lpBuffer=0x8ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x812fc38, lpOverlapped=0x0 | out: lpBuffer=0x8ab0058*, lpNumberOfBytesRead=0x812fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0060.470] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.471] WriteFile (in: hFile=0x224, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x812fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fcb0*=0xc0102, lpOverlapped=0x0) returned 1
	[0060.643] SetEndOfFile (hFile=0x224) returned 1
	[0060.643] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8dbd150
	[0060.848] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0060.848] WriteFile (in: hFile=0x224, lpBuffer=0x8dbd150*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8dbd150*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0060.849] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xcdbd5, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0060.849] WriteFile (in: hFile=0x224, lpBuffer=0x8dbd150*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8dbd150*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0060.855] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x229380, lpNewFilePointer=0x0, dwMoveMethod=0x812fc7c | out: lpNewFilePointer=0x0) returned 1
	[0060.855] WriteFile (in: hFile=0x224, lpBuffer=0x8dbd150*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x812fc88, lpOverlapped=0x0 | out: lpBuffer=0x8dbd150*, lpNumberOfBytesWritten=0x812fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0060.858] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8dbd150 | out: hHeap=0x5350000) returned 1
	[0060.858] CloseHandle (hObject=0x224) returned 1
	[0060.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.858] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL") returned 72
	[0060.858] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL") returned 72
	[0060.858] lstrlenW (lpString=".doc") returned 4
	[0060.858] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.858] lstrlenW (lpString=".docx") returned 5
	[0060.858] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1
	[0060.858] lstrlenW (lpString=".pdf") returned 4
	[0060.858] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.858] lstrlenW (lpString=".xls") returned 4
	[0060.858] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.858] lstrlenW (lpString=".xlsx") returned 5
	[0060.858] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1
	[0060.858] lstrlenW (lpString=".ppt") returned 4
	[0060.858] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.858] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL") returned 72
	[0060.858] lstrlenW (lpString=".zip") returned 4
	[0060.858] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.858] lstrlenW (lpString=".rar") returned 4
	[0060.858] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.858] lstrlenW (lpString=".bz2") returned 4
	[0060.859] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.859] lstrlenW (lpString=".7z") returned 3
	[0060.859] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.859] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL") returned 72
	[0060.859] lstrlenW (lpString=".dbf") returned 4
	[0060.859] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.859] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL") returned 72
	[0060.859] lstrlenW (lpString=".1cd") returned 4
	[0060.859] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.859] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL") returned 72
	[0060.859] lstrlenW (lpString=".jpg") returned 4
	[0060.859] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.859] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL") returned 72
	[0060.859] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL") returned 72
	[0060.859] lstrlenW (lpString=".doc") returned 4
	[0060.859] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.859] lstrlenW (lpString=".docx") returned 5
	[0060.859] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1
	[0060.859] lstrlenW (lpString=".pdf") returned 4
	[0060.859] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.859] lstrlenW (lpString=".xls") returned 4
	[0060.859] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.859] lstrlenW (lpString=".xlsx") returned 5
	[0060.859] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1
	[0060.859] lstrlenW (lpString=".ppt") returned 4
	[0060.859] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.859] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL") returned 72
	[0060.859] lstrlenW (lpString=".zip") returned 4
	[0060.859] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.859] lstrlenW (lpString=".rar") returned 4
	[0060.859] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.859] lstrlenW (lpString=".bz2") returned 4
	[0060.860] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.860] lstrlenW (lpString=".7z") returned 3
	[0060.860] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.860] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL") returned 72
	[0060.860] lstrlenW (lpString=".dbf") returned 4
	[0060.860] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.860] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL") returned 72
	[0060.860] lstrlenW (lpString=".1cd") returned 4
	[0060.860] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.860] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL") returned 72
	[0060.860] lstrlenW (lpString=".jpg") returned 4
	[0060.860] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.860] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0060.860] lstrlenW (lpString="ACEEXCH.DLL") returned 11
	[0060.860] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0060.860] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=442272) returned 1
	[0060.861] CloseHandle (hObject=0x224) returned 1
	[0060.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll")) returned 0x20
	[0060.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0060.861] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0060.861] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.861] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.861] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0060.861] GetLastError () returned 0x0
	[0060.861] ReadFile (in: hFile=0x224, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x6bfa0, lpOverlapped=0x0) returned 1
	[0060.890] WriteFile (in: hFile=0x204, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x6bfb0, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x6bfb0, lpOverlapped=0x0) returned 1
	[0060.898] ReadFile (in: hFile=0x224, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.898] WriteFile (in: hFile=0x204, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0060.898] SetEndOfFile (hFile=0x204) returned 1
	[0060.926] CloseHandle (hObject=0x204) returned 1
	[0060.926] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.926] SetEndOfFile (hFile=0x224) returned 1
	[0060.930] CloseHandle (hObject=0x224) returned 1
	[0060.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.930] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll")) returned 1
	[0060.930] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL") returned 67
	[0060.930] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL") returned 67
	[0060.930] lstrlenW (lpString=".doc") returned 4
	[0060.930] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.930] lstrlenW (lpString=".docx") returned 5
	[0060.930] lstrcmpiW (lpString1=".docx", lpString2="H.DLL") returned -1
	[0060.930] lstrlenW (lpString=".pdf") returned 4
	[0060.931] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.931] lstrlenW (lpString=".xls") returned 4
	[0060.931] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.931] lstrlenW (lpString=".xlsx") returned 5
	[0060.931] lstrcmpiW (lpString1=".xlsx", lpString2="H.DLL") returned -1
	[0060.931] lstrlenW (lpString=".ppt") returned 4
	[0060.931] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL") returned 67
	[0060.931] lstrlenW (lpString=".zip") returned 4
	[0060.931] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.931] lstrlenW (lpString=".rar") returned 4
	[0060.931] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.931] lstrlenW (lpString=".bz2") returned 4
	[0060.931] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.931] lstrlenW (lpString=".7z") returned 3
	[0060.931] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL") returned 67
	[0060.931] lstrlenW (lpString=".dbf") returned 4
	[0060.931] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL") returned 67
	[0060.931] lstrlenW (lpString=".1cd") returned 4
	[0060.931] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL") returned 67
	[0060.931] lstrlenW (lpString=".jpg") returned 4
	[0060.931] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL") returned 67
	[0060.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL") returned 67
	[0060.931] lstrlenW (lpString=".doc") returned 4
	[0060.931] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.931] lstrlenW (lpString=".docx") returned 5
	[0060.931] lstrcmpiW (lpString1=".docx", lpString2="H.DLL") returned -1
	[0060.931] lstrlenW (lpString=".pdf") returned 4
	[0060.932] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.932] lstrlenW (lpString=".xls") returned 4
	[0060.932] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.932] lstrlenW (lpString=".xlsx") returned 5
	[0060.932] lstrcmpiW (lpString1=".xlsx", lpString2="H.DLL") returned -1
	[0060.932] lstrlenW (lpString=".ppt") returned 4
	[0060.932] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL") returned 67
	[0060.932] lstrlenW (lpString=".zip") returned 4
	[0060.932] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.932] lstrlenW (lpString=".rar") returned 4
	[0060.932] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.932] lstrlenW (lpString=".bz2") returned 4
	[0060.932] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.932] lstrlenW (lpString=".7z") returned 3
	[0060.932] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL") returned 67
	[0060.932] lstrlenW (lpString=".dbf") returned 4
	[0060.932] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL") returned 67
	[0060.932] lstrlenW (lpString=".1cd") returned 4
	[0060.932] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL") returned 67
	[0060.932] lstrlenW (lpString=".jpg") returned 4
	[0060.932] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.932] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0060.932] lstrlenW (lpString="ACEODBC.DLL") returned 11
	[0060.932] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0060.933] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=342960) returned 1
	[0060.933] CloseHandle (hObject=0x224) returned 1
	[0060.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll")) returned 0x20
	[0060.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0060.933] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0060.933] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.933] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.933] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0060.934] GetLastError () returned 0x0
	[0060.934] ReadFile (in: hFile=0x224, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x53bb0, lpOverlapped=0x0) returned 1
	[0060.943] WriteFile (in: hFile=0x204, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x53bc0, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x53bc0, lpOverlapped=0x0) returned 1
	[0060.952] ReadFile (in: hFile=0x224, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.952] WriteFile (in: hFile=0x204, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0060.952] SetEndOfFile (hFile=0x204) returned 1
	[0060.952] CloseHandle (hObject=0x204) returned 1
	[0060.952] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.952] SetEndOfFile (hFile=0x224) returned 1
	[0060.955] CloseHandle (hObject=0x224) returned 1
	[0060.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.956] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll")) returned 1
	[0060.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL") returned 67
	[0060.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL") returned 67
	[0060.956] lstrlenW (lpString=".doc") returned 4
	[0060.956] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.956] lstrlenW (lpString=".docx") returned 5
	[0060.956] lstrcmpiW (lpString1=".docx", lpString2="C.DLL") returned -1
	[0060.956] lstrlenW (lpString=".pdf") returned 4
	[0060.956] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.956] lstrlenW (lpString=".xls") returned 4
	[0060.956] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.956] lstrlenW (lpString=".xlsx") returned 5
	[0060.956] lstrcmpiW (lpString1=".xlsx", lpString2="C.DLL") returned -1
	[0060.956] lstrlenW (lpString=".ppt") returned 4
	[0060.956] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL") returned 67
	[0060.956] lstrlenW (lpString=".zip") returned 4
	[0060.956] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.956] lstrlenW (lpString=".rar") returned 4
	[0060.956] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.956] lstrlenW (lpString=".bz2") returned 4
	[0060.957] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.957] lstrlenW (lpString=".7z") returned 3
	[0060.957] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL") returned 67
	[0060.957] lstrlenW (lpString=".dbf") returned 4
	[0060.957] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL") returned 67
	[0060.957] lstrlenW (lpString=".1cd") returned 4
	[0060.957] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL") returned 67
	[0060.957] lstrlenW (lpString=".jpg") returned 4
	[0060.957] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL") returned 67
	[0060.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL") returned 67
	[0060.957] lstrlenW (lpString=".doc") returned 4
	[0060.957] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.958] lstrlenW (lpString=".docx") returned 5
	[0060.958] lstrcmpiW (lpString1=".docx", lpString2="C.DLL") returned -1
	[0060.958] lstrlenW (lpString=".pdf") returned 4
	[0060.958] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.958] lstrlenW (lpString=".xls") returned 4
	[0060.958] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.958] lstrlenW (lpString=".xlsx") returned 5
	[0060.958] lstrcmpiW (lpString1=".xlsx", lpString2="C.DLL") returned -1
	[0060.958] lstrlenW (lpString=".ppt") returned 4
	[0060.958] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL") returned 67
	[0060.958] lstrlenW (lpString=".zip") returned 4
	[0060.958] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.958] lstrlenW (lpString=".rar") returned 4
	[0060.958] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.958] lstrlenW (lpString=".bz2") returned 4
	[0060.958] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.958] lstrlenW (lpString=".7z") returned 3
	[0060.958] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL") returned 67
	[0060.958] lstrlenW (lpString=".dbf") returned 4
	[0060.958] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL") returned 67
	[0060.958] lstrlenW (lpString=".1cd") returned 4
	[0060.958] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL") returned 67
	[0060.958] lstrlenW (lpString=".jpg") returned 4
	[0060.958] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.958] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0060.958] lstrlenW (lpString="ACEODDBS.DLL") returned 12
	[0060.959] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0060.959] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=15800) returned 1
	[0060.959] CloseHandle (hObject=0x224) returned 1
	[0060.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll")) returned 0x20
	[0060.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0060.959] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0060.959] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.959] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.960] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0060.960] GetLastError () returned 0x0
	[0060.960] ReadFile (in: hFile=0x224, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x3db8, lpOverlapped=0x0) returned 1
	[0061.210] WriteFile (in: hFile=0x204, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x3dc0, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x3dc0, lpOverlapped=0x0) returned 1
	[0061.211] ReadFile (in: hFile=0x224, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.211] WriteFile (in: hFile=0x204, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0061.211] SetEndOfFile (hFile=0x204) returned 1
	[0061.617] CloseHandle (hObject=0x204) returned 1
	[0061.621] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.623] SetEndOfFile (hFile=0x224) returned 1
	[0061.640] CloseHandle (hObject=0x224) returned 1
	[0061.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.651] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll")) returned 1
	[0061.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL") returned 68
	[0061.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL") returned 68
	[0061.847] lstrlenW (lpString=".doc") returned 4
	[0061.847] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0061.847] lstrlenW (lpString=".docx") returned 5
	[0061.847] lstrcmpiW (lpString1=".docx", lpString2="S.DLL") returned -1
	[0061.847] lstrlenW (lpString=".pdf") returned 4
	[0061.847] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0061.847] lstrlenW (lpString=".xls") returned 4
	[0061.847] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0061.847] lstrlenW (lpString=".xlsx") returned 5
	[0061.847] lstrcmpiW (lpString1=".xlsx", lpString2="S.DLL") returned -1
	[0061.847] lstrlenW (lpString=".ppt") returned 4
	[0061.847] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0061.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL") returned 68
	[0061.847] lstrlenW (lpString=".zip") returned 4
	[0061.847] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0061.848] lstrlenW (lpString=".rar") returned 4
	[0061.848] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0061.848] lstrlenW (lpString=".bz2") returned 4
	[0061.848] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0061.848] lstrlenW (lpString=".7z") returned 3
	[0061.848] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0061.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL") returned 68
	[0061.848] lstrlenW (lpString=".dbf") returned 4
	[0061.848] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0061.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL") returned 68
	[0061.848] lstrlenW (lpString=".1cd") returned 4
	[0061.848] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0061.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL") returned 68
	[0061.848] lstrlenW (lpString=".jpg") returned 4
	[0061.848] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0061.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL") returned 68
	[0061.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL") returned 68
	[0061.848] lstrlenW (lpString=".doc") returned 4
	[0061.848] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0061.848] lstrlenW (lpString=".docx") returned 5
	[0061.848] lstrcmpiW (lpString1=".docx", lpString2="S.DLL") returned -1
	[0061.848] lstrlenW (lpString=".pdf") returned 4
	[0061.848] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0061.848] lstrlenW (lpString=".xls") returned 4
	[0061.848] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0061.848] lstrlenW (lpString=".xlsx") returned 5
	[0061.848] lstrcmpiW (lpString1=".xlsx", lpString2="S.DLL") returned -1
	[0061.848] lstrlenW (lpString=".ppt") returned 4
	[0061.848] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0061.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL") returned 68
	[0061.848] lstrlenW (lpString=".zip") returned 4
	[0061.848] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0061.849] lstrlenW (lpString=".rar") returned 4
	[0061.849] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0061.849] lstrlenW (lpString=".bz2") returned 4
	[0061.849] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0061.849] lstrlenW (lpString=".7z") returned 3
	[0061.849] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0061.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL") returned 68
	[0061.849] lstrlenW (lpString=".dbf") returned 4
	[0061.849] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0061.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL") returned 68
	[0061.849] lstrlenW (lpString=".1cd") returned 4
	[0061.849] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0061.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL") returned 68
	[0061.849] lstrlenW (lpString=".jpg") returned 4
	[0061.849] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0061.849] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0061.849] lstrlenW (lpString="ACEOLEDB.DLL") returned 12
	[0061.849] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0063.527] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=537504) returned 1
	[0063.527] CloseHandle (hObject=0x210) returned 1
	[0063.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll")) returned 0x20
	[0063.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0063.528] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0063.528] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.528] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.528] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0063.528] GetLastError () returned 0x0
	[0063.528] ReadFile (in: hFile=0x210, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x833a0, lpOverlapped=0x0) returned 1
	[0063.540] WriteFile (in: hFile=0x21c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x833b0, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x833b0, lpOverlapped=0x0) returned 1
	[0063.550] ReadFile (in: hFile=0x210, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.550] WriteFile (in: hFile=0x21c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0063.550] SetEndOfFile (hFile=0x21c) returned 1
	[0063.550] CloseHandle (hObject=0x21c) returned 1
	[0063.550] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.550] SetEndOfFile (hFile=0x210) returned 1
	[0063.555] CloseHandle (hObject=0x210) returned 1
	[0063.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.556] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll")) returned 1
	[0063.556] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL") returned 68
	[0063.556] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL") returned 68
	[0063.556] lstrlenW (lpString=".doc") returned 4
	[0063.556] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0063.556] lstrlenW (lpString=".docx") returned 5
	[0063.556] lstrcmpiW (lpString1=".docx", lpString2="B.DLL") returned -1
	[0063.556] lstrlenW (lpString=".pdf") returned 4
	[0063.556] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0063.556] lstrlenW (lpString=".xls") returned 4
	[0063.556] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0063.556] lstrlenW (lpString=".xlsx") returned 5
	[0063.556] lstrcmpiW (lpString1=".xlsx", lpString2="B.DLL") returned -1
	[0063.556] lstrlenW (lpString=".ppt") returned 4
	[0063.556] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0063.556] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL") returned 68
	[0063.556] lstrlenW (lpString=".zip") returned 4
	[0063.556] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0063.556] lstrlenW (lpString=".rar") returned 4
	[0063.556] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0063.556] lstrlenW (lpString=".bz2") returned 4
	[0063.556] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0063.556] lstrlenW (lpString=".7z") returned 3
	[0063.556] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0063.556] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL") returned 68
	[0063.556] lstrlenW (lpString=".dbf") returned 4
	[0063.556] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0063.556] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL") returned 68
	[0063.557] lstrlenW (lpString=".1cd") returned 4
	[0063.557] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0063.557] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL") returned 68
	[0063.557] lstrlenW (lpString=".jpg") returned 4
	[0063.557] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0063.557] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL") returned 68
	[0063.557] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL") returned 68
	[0063.557] lstrlenW (lpString=".doc") returned 4
	[0063.557] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0063.557] lstrlenW (lpString=".docx") returned 5
	[0063.557] lstrcmpiW (lpString1=".docx", lpString2="B.DLL") returned -1
	[0063.557] lstrlenW (lpString=".pdf") returned 4
	[0063.557] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0063.557] lstrlenW (lpString=".xls") returned 4
	[0063.557] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0063.557] lstrlenW (lpString=".xlsx") returned 5
	[0063.557] lstrcmpiW (lpString1=".xlsx", lpString2="B.DLL") returned -1
	[0063.557] lstrlenW (lpString=".ppt") returned 4
	[0063.557] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0063.557] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL") returned 68
	[0063.557] lstrlenW (lpString=".zip") returned 4
	[0063.557] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0063.557] lstrlenW (lpString=".rar") returned 4
	[0063.557] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0063.557] lstrlenW (lpString=".bz2") returned 4
	[0063.557] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0063.557] lstrlenW (lpString=".7z") returned 3
	[0063.557] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0063.557] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL") returned 68
	[0063.557] lstrlenW (lpString=".dbf") returned 4
	[0063.557] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0063.557] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL") returned 68
	[0063.558] lstrlenW (lpString=".1cd") returned 4
	[0063.558] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0063.558] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL") returned 68
	[0063.558] lstrlenW (lpString=".jpg") returned 4
	[0063.558] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0063.558] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0063.558] lstrlenW (lpString="ACETXT.DLL") returned 10
	[0063.558] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0063.558] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=297360) returned 1
	[0063.558] CloseHandle (hObject=0x210) returned 1
	[0063.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll")) returned 0x20
	[0063.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0063.559] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0063.559] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.559] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.559] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0063.559] GetLastError () returned 0x0
	[0063.559] ReadFile (in: hFile=0x210, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x48990, lpOverlapped=0x0) returned 1
	[0063.740] WriteFile (in: hFile=0x21c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x489a0, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x489a0, lpOverlapped=0x0) returned 1
	[0063.746] ReadFile (in: hFile=0x210, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.746] WriteFile (in: hFile=0x21c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0063.746] SetEndOfFile (hFile=0x21c) returned 1
	[0063.746] CloseHandle (hObject=0x21c) returned 1
	[0063.747] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.747] SetEndOfFile (hFile=0x210) returned 1
	[0063.750] CloseHandle (hObject=0x210) returned 1
	[0063.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.750] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll")) returned 1
	[0063.750] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL") returned 66
	[0063.750] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL") returned 66
	[0063.750] lstrlenW (lpString=".doc") returned 4
	[0063.750] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0063.750] lstrlenW (lpString=".docx") returned 5
	[0063.750] lstrcmpiW (lpString1=".docx", lpString2="T.DLL") returned -1
	[0063.750] lstrlenW (lpString=".pdf") returned 4
	[0063.750] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0063.750] lstrlenW (lpString=".xls") returned 4
	[0063.750] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0063.750] lstrlenW (lpString=".xlsx") returned 5
	[0063.750] lstrcmpiW (lpString1=".xlsx", lpString2="T.DLL") returned -1
	[0063.751] lstrlenW (lpString=".ppt") returned 4
	[0063.751] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0063.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL") returned 66
	[0063.751] lstrlenW (lpString=".zip") returned 4
	[0063.751] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0063.751] lstrlenW (lpString=".rar") returned 4
	[0063.751] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0063.751] lstrlenW (lpString=".bz2") returned 4
	[0063.751] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0063.751] lstrlenW (lpString=".7z") returned 3
	[0063.751] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0063.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL") returned 66
	[0063.751] lstrlenW (lpString=".dbf") returned 4
	[0063.751] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0063.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL") returned 66
	[0063.751] lstrlenW (lpString=".1cd") returned 4
	[0063.751] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0063.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL") returned 66
	[0063.751] lstrlenW (lpString=".jpg") returned 4
	[0063.751] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0063.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL") returned 66
	[0063.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL") returned 66
	[0063.751] lstrlenW (lpString=".doc") returned 4
	[0063.751] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0063.751] lstrlenW (lpString=".docx") returned 5
	[0063.751] lstrcmpiW (lpString1=".docx", lpString2="T.DLL") returned -1
	[0063.751] lstrlenW (lpString=".pdf") returned 4
	[0063.751] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0063.751] lstrlenW (lpString=".xls") returned 4
	[0063.751] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0063.751] lstrlenW (lpString=".xlsx") returned 5
	[0063.751] lstrcmpiW (lpString1=".xlsx", lpString2="T.DLL") returned -1
	[0063.752] lstrlenW (lpString=".ppt") returned 4
	[0063.752] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0063.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL") returned 66
	[0063.752] lstrlenW (lpString=".zip") returned 4
	[0063.752] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0063.752] lstrlenW (lpString=".rar") returned 4
	[0063.752] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0063.752] lstrlenW (lpString=".bz2") returned 4
	[0063.752] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0063.752] lstrlenW (lpString=".7z") returned 3
	[0063.752] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0063.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL") returned 66
	[0063.752] lstrlenW (lpString=".dbf") returned 4
	[0063.752] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0063.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL") returned 66
	[0063.752] lstrlenW (lpString=".1cd") returned 4
	[0063.752] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0063.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL") returned 66
	[0063.752] lstrlenW (lpString=".jpg") returned 4
	[0063.752] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0063.752] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0063.752] lstrlenW (lpString="ACEXBE.DLL") returned 10
	[0063.752] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0063.774] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x812ff1c | out: lpFileSize=0x812ff1c*=502168) returned 1
	[0063.774] CloseHandle (hObject=0x1e8) returned 1
	[0063.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll")) returned 0x20
	[0063.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0063.774] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0063.774] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.774] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x812fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.774] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0063.775] GetLastError () returned 0x0
	[0063.775] ReadFile (in: hFile=0x1e8, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x7a998, lpOverlapped=0x0) returned 1
	[0063.786] WriteFile (in: hFile=0x22c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0x7a9a0, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0x7a9a0, lpOverlapped=0x0) returned 1
	[0063.793] ReadFile (in: hFile=0x1e8, lpBuffer=0x8a30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x812fed4, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesRead=0x812fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.794] WriteFile (in: hFile=0x22c, lpBuffer=0x8a30020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x812fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8a30020*, lpNumberOfBytesWritten=0x812fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0063.794] SetEndOfFile (hFile=0x22c) 

Thread:
	id = 17
	os_tid = 0xa54

	[0035.837] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x82000b0
	[0035.837] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x82100b8
	[0035.837] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0ad0
	[0035.838] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x6) returned 0x53dd748
	[0035.838] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0ae8
	[0035.838] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x100000) returned 0x8b40020
	[0035.838] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0b00
	[0035.838] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0b00, Size=0x20) returned 0x53e7088
	[0035.838] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0b00
	[0035.838] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0b00, Size=0x20) returned 0x53e70b0
	[0035.838] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0035.838] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0035.838] Wow64DisableWow64FsRedirection (in: OldValue=0x847ff58 | out: OldValue=0x847ff58*=0x0) returned 1
	[0035.838] lstrlenW (lpString="kernel32.dll") returned 12
	[0035.838] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e7088 | out: hHeap=0x5350000) returned 1
	[0035.838] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0035.838] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e70b0 | out: hHeap=0x5350000) returned 1
	[0035.838] Sleep (dwMilliseconds=0x64) 
	[0036.145] lstrlenW (lpString="BCD") returned 3
	[0036.145] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0036.154] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0036.163] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0036.163] lstrlenW (lpString=".doc") returned 4
	[0036.163] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1
	[0036.163] lstrlenW (lpString=".docx") returned 5
	[0036.163] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1
	[0036.163] lstrlenW (lpString=".pdf") returned 4
	[0036.163] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1
	[0036.163] lstrlenW (lpString=".xls") returned 4
	[0036.163] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1
	[0036.163] lstrlenW (lpString=".xlsx") returned 5
	[0036.163] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1
	[0036.163] lstrlenW (lpString=".ppt") returned 4
	[0036.163] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1
	[0036.163] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0036.163] lstrlenW (lpString=".zip") returned 4
	[0036.163] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1
	[0036.163] lstrlenW (lpString=".rar") returned 4
	[0036.163] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1
	[0036.163] lstrlenW (lpString=".bz2") returned 4
	[0036.163] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1
	[0036.163] lstrlenW (lpString=".7z") returned 3
	[0036.163] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0036.163] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0036.163] lstrlenW (lpString=".dbf") returned 4
	[0036.163] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1
	[0036.163] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0036.163] lstrlenW (lpString=".1cd") returned 4
	[0036.163] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1
	[0036.163] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0036.163] lstrlenW (lpString=".jpg") returned 4
	[0036.163] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1
	[0036.163] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0036.164] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0036.164] lstrlenW (lpString=".doc") returned 4
	[0036.164] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1
	[0036.164] lstrlenW (lpString=".docx") returned 5
	[0036.164] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1
	[0036.164] lstrlenW (lpString=".pdf") returned 4
	[0036.164] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1
	[0036.164] lstrlenW (lpString=".xls") returned 4
	[0036.164] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1
	[0036.164] lstrlenW (lpString=".xlsx") returned 5
	[0036.164] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1
	[0036.164] lstrlenW (lpString=".ppt") returned 4
	[0036.164] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1
	[0036.164] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0036.164] lstrlenW (lpString=".zip") returned 4
	[0036.164] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1
	[0036.164] lstrlenW (lpString=".rar") returned 4
	[0036.164] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1
	[0036.164] lstrlenW (lpString=".bz2") returned 4
	[0036.164] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1
	[0036.164] lstrlenW (lpString=".7z") returned 3
	[0036.164] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0036.164] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0036.164] lstrlenW (lpString=".dbf") returned 4
	[0036.164] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1
	[0036.164] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0036.164] lstrlenW (lpString=".1cd") returned 4
	[0036.164] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1
	[0036.164] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0036.164] lstrlenW (lpString=".jpg") returned 4
	[0036.164] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1
	[0036.165] lstrcmpiW (lpString1=".LOG1", lpString2=".beets") returned 1
	[0036.165] lstrlenW (lpString="BCD.LOG1") returned 8
	[0036.165] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0036.165] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=0) returned 1
	[0036.165] CloseHandle (hObject=0x1a4) returned 1
	[0036.165] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0036.165] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0036.165] lstrlenW (lpString=".doc") returned 4
	[0036.165] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0036.165] lstrlenW (lpString=".docx") returned 5
	[0036.165] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0036.165] lstrlenW (lpString=".pdf") returned 4
	[0036.165] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0036.165] lstrlenW (lpString=".xls") returned 4
	[0036.165] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1
	[0036.165] lstrlenW (lpString=".xlsx") returned 5
	[0036.165] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1
	[0036.165] lstrlenW (lpString=".ppt") returned 4
	[0036.165] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0036.165] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0036.166] lstrlenW (lpString=".zip") returned 4
	[0036.166] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1
	[0036.166] lstrlenW (lpString=".rar") returned 4
	[0036.166] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0036.166] lstrlenW (lpString=".bz2") returned 4
	[0036.166] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0036.166] lstrlenW (lpString=".7z") returned 3
	[0036.166] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0036.166] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0036.166] lstrlenW (lpString=".dbf") returned 4
	[0036.166] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0036.166] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0036.166] lstrlenW (lpString=".1cd") returned 4
	[0036.166] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0036.166] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0036.166] lstrlenW (lpString=".jpg") returned 4
	[0036.166] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0036.166] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0036.166] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0036.166] lstrlenW (lpString=".doc") returned 4
	[0036.166] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0036.166] lstrlenW (lpString=".docx") returned 5
	[0036.166] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0036.166] lstrlenW (lpString=".pdf") returned 4
	[0036.166] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0036.166] lstrlenW (lpString=".xls") returned 4
	[0036.166] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1
	[0036.166] lstrlenW (lpString=".xlsx") returned 5
	[0036.166] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1
	[0036.166] lstrlenW (lpString=".ppt") returned 4
	[0036.166] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0036.166] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0036.167] lstrlenW (lpString=".zip") returned 4
	[0036.167] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1
	[0036.167] lstrlenW (lpString=".rar") returned 4
	[0036.167] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0036.167] lstrlenW (lpString=".bz2") returned 4
	[0036.167] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0036.167] lstrlenW (lpString=".7z") returned 3
	[0036.167] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0036.167] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0036.167] lstrlenW (lpString=".dbf") returned 4
	[0036.167] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0036.167] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0036.167] lstrlenW (lpString=".1cd") returned 4
	[0036.167] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0036.167] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0036.167] lstrlenW (lpString=".jpg") returned 4
	[0036.167] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0036.167] lstrcmpiW (lpString1=".LOG2", lpString2=".beets") returned 1
	[0036.167] lstrlenW (lpString="BCD.LOG2") returned 8
	[0036.167] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0036.167] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=0) returned 1
	[0036.167] CloseHandle (hObject=0x1a4) returned 1
	[0036.168] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0036.168] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0036.168] lstrlenW (lpString=".doc") returned 4
	[0036.168] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1
	[0036.168] lstrlenW (lpString=".docx") returned 5
	[0036.168] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1
	[0036.168] lstrlenW (lpString=".pdf") returned 4
	[0036.168] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1
	[0036.168] lstrlenW (lpString=".xls") returned 4
	[0036.168] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1
	[0036.168] lstrlenW (lpString=".xlsx") returned 5
	[0036.168] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1
	[0036.168] lstrlenW (lpString=".ppt") returned 4
	[0036.168] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1
	[0036.168] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0036.168] lstrlenW (lpString=".zip") returned 4
	[0036.168] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1
	[0036.168] lstrlenW (lpString=".rar") returned 4
	[0036.168] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1
	[0036.168] lstrlenW (lpString=".bz2") returned 4
	[0036.168] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1
	[0036.168] lstrlenW (lpString=".7z") returned 3
	[0036.168] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1
	[0036.169] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0036.169] lstrlenW (lpString=".dbf") returned 4
	[0036.169] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1
	[0036.169] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0036.169] lstrlenW (lpString=".1cd") returned 4
	[0036.169] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1
	[0036.169] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0036.169] lstrlenW (lpString=".jpg") returned 4
	[0036.169] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1
	[0036.169] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0036.169] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0036.169] lstrlenW (lpString=".doc") returned 4
	[0036.169] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1
	[0036.169] lstrlenW (lpString=".docx") returned 5
	[0036.169] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1
	[0036.169] lstrlenW (lpString=".pdf") returned 4
	[0036.169] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1
	[0036.169] lstrlenW (lpString=".xls") returned 4
	[0036.169] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1
	[0036.169] lstrlenW (lpString=".xlsx") returned 5
	[0036.169] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1
	[0036.169] lstrlenW (lpString=".ppt") returned 4
	[0036.169] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1
	[0036.169] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0036.169] lstrlenW (lpString=".zip") returned 4
	[0036.169] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1
	[0036.169] lstrlenW (lpString=".rar") returned 4
	[0036.169] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1
	[0036.169] lstrlenW (lpString=".bz2") returned 4
	[0036.169] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1
	[0036.169] lstrlenW (lpString=".7z") returned 3
	[0036.169] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1
	[0036.170] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0036.170] lstrlenW (lpString=".dbf") returned 4
	[0036.170] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1
	[0036.170] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0036.170] lstrlenW (lpString=".1cd") returned 4
	[0036.170] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1
	[0036.170] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0036.170] lstrlenW (lpString=".jpg") returned 4
	[0036.170] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1
	[0036.170] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0036.170] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0036.170] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0036.170] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=89168) returned 1
	[0036.170] CloseHandle (hObject=0x1a4) returned 1
	[0036.170] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20
	[0036.170] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.170] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0036.171] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0036.171] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0036.171] lstrlenW (lpString=".doc") returned 4
	[0036.171] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.171] lstrlenW (lpString=".docx") returned 5
	[0036.171] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.171] lstrlenW (lpString=".pdf") returned 4
	[0036.171] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.171] lstrlenW (lpString=".xls") returned 4
	[0036.171] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.171] lstrlenW (lpString=".xlsx") returned 5
	[0036.171] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.171] lstrlenW (lpString=".ppt") returned 4
	[0036.171] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.171] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0036.171] lstrlenW (lpString=".zip") returned 4
	[0036.171] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.171] lstrlenW (lpString=".rar") returned 4
	[0036.171] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.171] lstrlenW (lpString=".bz2") returned 4
	[0036.171] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.171] lstrlenW (lpString=".7z") returned 3
	[0036.171] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.171] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0036.171] lstrlenW (lpString=".dbf") returned 4
	[0036.171] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.171] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0036.171] lstrlenW (lpString=".1cd") returned 4
	[0036.171] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.171] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0036.171] lstrlenW (lpString=".jpg") returned 4
	[0036.171] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.171] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0036.172] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0036.172] lstrlenW (lpString=".doc") returned 4
	[0036.172] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.172] lstrlenW (lpString=".docx") returned 5
	[0036.172] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.172] lstrlenW (lpString=".pdf") returned 4
	[0036.172] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.172] lstrlenW (lpString=".xls") returned 4
	[0036.172] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.172] lstrlenW (lpString=".xlsx") returned 5
	[0036.172] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.172] lstrlenW (lpString=".ppt") returned 4
	[0036.172] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.172] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0036.172] lstrlenW (lpString=".zip") returned 4
	[0036.172] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.172] lstrlenW (lpString=".rar") returned 4
	[0036.172] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.172] lstrlenW (lpString=".bz2") returned 4
	[0036.172] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.172] lstrlenW (lpString=".7z") returned 3
	[0036.172] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.172] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0036.172] lstrlenW (lpString=".dbf") returned 4
	[0036.172] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.172] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0036.172] lstrlenW (lpString=".1cd") returned 4
	[0036.172] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.172] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0036.172] lstrlenW (lpString=".jpg") returned 4
	[0036.172] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.173] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0036.173] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0036.173] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0036.173] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=87616) returned 1
	[0036.173] CloseHandle (hObject=0x1a4) returned 1
	[0036.173] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20
	[0036.173] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.173] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0036.173] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0036.173] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0036.173] lstrlenW (lpString=".doc") returned 4
	[0036.173] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.173] lstrlenW (lpString=".docx") returned 5
	[0036.173] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.173] lstrlenW (lpString=".pdf") returned 4
	[0036.173] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.173] lstrlenW (lpString=".xls") returned 4
	[0036.173] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.173] lstrlenW (lpString=".xlsx") returned 5
	[0036.173] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.173] lstrlenW (lpString=".ppt") returned 4
	[0036.174] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.174] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0036.174] lstrlenW (lpString=".zip") returned 4
	[0036.174] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.174] lstrlenW (lpString=".rar") returned 4
	[0036.174] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.174] lstrlenW (lpString=".bz2") returned 4
	[0036.174] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.174] lstrlenW (lpString=".7z") returned 3
	[0036.174] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.174] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0036.174] lstrlenW (lpString=".dbf") returned 4
	[0036.174] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.174] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0036.174] lstrlenW (lpString=".1cd") returned 4
	[0036.174] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.174] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0036.174] lstrlenW (lpString=".jpg") returned 4
	[0036.174] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.174] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0036.174] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0036.174] lstrlenW (lpString=".doc") returned 4
	[0036.174] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.174] lstrlenW (lpString=".docx") returned 5
	[0036.174] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.174] lstrlenW (lpString=".pdf") returned 4
	[0036.174] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.174] lstrlenW (lpString=".xls") returned 4
	[0036.174] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.174] lstrlenW (lpString=".xlsx") returned 5
	[0036.174] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.174] lstrlenW (lpString=".ppt") returned 4
	[0036.174] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.175] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0036.175] lstrlenW (lpString=".zip") returned 4
	[0036.175] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.175] lstrlenW (lpString=".rar") returned 4
	[0036.175] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.175] lstrlenW (lpString=".bz2") returned 4
	[0036.175] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.175] lstrlenW (lpString=".7z") returned 3
	[0036.175] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.175] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0036.175] lstrlenW (lpString=".dbf") returned 4
	[0036.175] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.175] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0036.175] lstrlenW (lpString=".1cd") returned 4
	[0036.175] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.175] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0036.175] lstrlenW (lpString=".jpg") returned 4
	[0036.175] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.175] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0036.175] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0036.175] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0036.175] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=91712) returned 1
	[0036.175] CloseHandle (hObject=0x1a4) returned 1
	[0036.176] GetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20
	[0036.176] GetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.176] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0036.176] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0036.176] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0036.176] lstrlenW (lpString=".doc") returned 4
	[0036.176] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.176] lstrlenW (lpString=".docx") returned 5
	[0036.176] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.176] lstrlenW (lpString=".pdf") returned 4
	[0036.176] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.176] lstrlenW (lpString=".xls") returned 4
	[0036.176] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.176] lstrlenW (lpString=".xlsx") returned 5
	[0036.176] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.176] lstrlenW (lpString=".ppt") returned 4
	[0036.176] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.176] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0036.176] lstrlenW (lpString=".zip") returned 4
	[0036.176] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.176] lstrlenW (lpString=".rar") returned 4
	[0036.176] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.176] lstrlenW (lpString=".bz2") returned 4
	[0036.176] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.176] lstrlenW (lpString=".7z") returned 3
	[0036.176] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.176] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0036.176] lstrlenW (lpString=".dbf") returned 4
	[0036.177] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.177] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0036.177] lstrlenW (lpString=".1cd") returned 4
	[0036.177] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.177] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0036.177] lstrlenW (lpString=".jpg") returned 4
	[0036.177] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.177] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0036.177] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0036.177] lstrlenW (lpString=".doc") returned 4
	[0036.177] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.177] lstrlenW (lpString=".docx") returned 5
	[0036.177] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.177] lstrlenW (lpString=".pdf") returned 4
	[0036.177] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.177] lstrlenW (lpString=".xls") returned 4
	[0036.177] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.177] lstrlenW (lpString=".xlsx") returned 5
	[0036.177] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.177] lstrlenW (lpString=".ppt") returned 4
	[0036.177] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.177] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0036.177] lstrlenW (lpString=".zip") returned 4
	[0036.177] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.177] lstrlenW (lpString=".rar") returned 4
	[0036.177] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.177] lstrlenW (lpString=".bz2") returned 4
	[0036.177] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.177] lstrlenW (lpString=".7z") returned 3
	[0036.177] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.177] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0036.177] lstrlenW (lpString=".dbf") returned 4
	[0036.177] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0036.178] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0036.178] lstrlenW (lpString=".1cd") returned 4
	[0036.178] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0036.178] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0036.178] lstrlenW (lpString=".jpg") returned 4
	[0036.178] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0036.178] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0036.178] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0036.178] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0036.178] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=94800) returned 1
	[0036.178] CloseHandle (hObject=0x1a4) returned 1
	[0036.178] GetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20
	[0036.178] GetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.178] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0036.178] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0036.178] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0036.178] lstrlenW (lpString=".doc") returned 4
	[0036.178] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0036.179] lstrlenW (lpString=".docx") returned 5
	[0036.179] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0036.179] lstrlenW (lpString=".pdf") returned 4
	[0036.179] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0036.179] lstrlenW (lpString=".xls") returned 4
	[0036.179] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0036.179] lstrlenW (lpString=".xlsx") returned 5
	[0036.179] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0036.179] lstrlenW (lpString=".ppt") returned 4
	[0036.179] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0036.179] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0036.179] lstrlenW (lpString=".zip") returned 4
	[0036.179] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0036.179] lstrlenW (lpString=".rar") returned 4
	[0036.179] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0036.179] lstrlenW (lpString=".bz2") returned 4
	[0036.179] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0036.179] lstrlenW (lpString=".7z") returned 3
	[0036.179] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0036.180] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\chs_boot.ttf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0036.721] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\cht_boot.ttf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0036.722] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0036.722] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0036.722] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0x0) returned 1
	[0036.722] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0036.722] ReadFile (in: hFile=0x194, lpBuffer=0x8b40058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b40058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0036.942] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0036.942] ReadFile (in: hFile=0x194, lpBuffer=0x8b80058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b80058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0036.956] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0036.956] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0036.956] ReadFile (in: hFile=0x194, lpBuffer=0x8bc0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8bc0058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0036.978] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.978] WriteFile (in: hFile=0x194, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xc010e, lpNumberOfBytesWritten=0x847fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fcb0*=0xc010e, lpOverlapped=0x0) returned 1
	[0037.462] SetEndOfFile (hFile=0x194) returned 1
	[0037.463] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d4d118
	[0037.463] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0037.463] WriteFile (in: hFile=0x194, lpBuffer=0x8d4d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d4d118*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0037.465] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0037.465] WriteFile (in: hFile=0x194, lpBuffer=0x8d4d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d4d118*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0037.471] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0037.471] WriteFile (in: hFile=0x194, lpBuffer=0x8d4d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d4d118*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0037.474] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d4d118 | out: hHeap=0x5350000) returned 1
	[0037.474] CloseHandle (hObject=0x194) returned 1
	[0038.151] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0038.151] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0038.151] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0038.151] lstrlenW (lpString=".doc") returned 4
	[0038.151] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0038.151] lstrlenW (lpString=".docx") returned 5
	[0038.151] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0038.151] lstrlenW (lpString=".pdf") returned 4
	[0038.151] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0038.151] lstrlenW (lpString=".xls") returned 4
	[0038.151] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0038.151] lstrlenW (lpString=".xlsx") returned 5
	[0038.151] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0038.151] lstrlenW (lpString=".ppt") returned 4
	[0038.151] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0038.151] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0038.151] lstrlenW (lpString=".zip") returned 4
	[0038.151] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0038.151] lstrlenW (lpString=".rar") returned 4
	[0038.152] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0038.152] lstrlenW (lpString=".bz2") returned 4
	[0038.152] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0038.152] lstrlenW (lpString=".7z") returned 3
	[0038.152] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0038.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0038.152] lstrlenW (lpString=".dbf") returned 4
	[0038.152] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0038.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0038.152] lstrlenW (lpString=".1cd") returned 4
	[0038.152] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0038.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0038.152] lstrlenW (lpString=".jpg") returned 4
	[0038.152] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0038.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0038.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0038.152] lstrlenW (lpString=".doc") returned 4
	[0038.152] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0038.152] lstrlenW (lpString=".docx") returned 5
	[0038.152] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0038.152] lstrlenW (lpString=".pdf") returned 4
	[0038.152] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0038.152] lstrlenW (lpString=".xls") returned 4
	[0038.152] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0038.152] lstrlenW (lpString=".xlsx") returned 5
	[0038.152] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0038.152] lstrlenW (lpString=".ppt") returned 4
	[0038.152] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0038.152] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0038.152] lstrlenW (lpString=".zip") returned 4
	[0038.152] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0038.153] lstrlenW (lpString=".rar") returned 4
	[0038.153] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0038.153] lstrlenW (lpString=".bz2") returned 4
	[0038.153] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0038.153] lstrlenW (lpString=".7z") returned 3
	[0038.153] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0038.153] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0038.153] lstrlenW (lpString=".dbf") returned 4
	[0038.153] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0038.153] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0038.153] lstrlenW (lpString=".1cd") returned 4
	[0038.153] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0038.153] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 80
	[0038.153] lstrlenW (lpString=".jpg") returned 4
	[0038.153] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0038.153] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0038.153] lstrlenW (lpString="PubLR.cab") returned 9
	[0038.153] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0038.153] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=9958388) returned 1
	[0038.153] CloseHandle (hObject=0x194) returned 1
	[0038.154] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab")) returned 0x2020
	[0038.154] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.154] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0038.154] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0038.154] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0x0) returned 1
	[0038.154] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0038.154] ReadFile (in: hFile=0x194, lpBuffer=0x8b40058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b40058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0038.158] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x32a6a6, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0038.158] ReadFile (in: hFile=0x194, lpBuffer=0x8b80058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b80058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0038.165] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0038.165] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x93f3f4, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0038.165] ReadFile (in: hFile=0x194, lpBuffer=0x8bc0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8bc0058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0038.183] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0038.184] WriteFile (in: hFile=0x194, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x847fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fcb0*=0xc00fe, lpOverlapped=0x0) returned 1
	[0038.530] SetEndOfFile (hFile=0x194) returned 1
	[0038.531] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8cb50d8
	[0038.535] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0038.535] WriteFile (in: hFile=0x194, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0038.536] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x32a6a6, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0038.536] WriteFile (in: hFile=0x194, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0038.543] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x93f3f4, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0038.543] WriteFile (in: hFile=0x194, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0038.547] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb50d8 | out: hHeap=0x5350000) returned 1
	[0038.547] CloseHandle (hObject=0x194) returned 1
	[0041.515] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0041.524] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72
	[0041.524] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72
	[0041.524] lstrlenW (lpString=".doc") returned 4
	[0041.525] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0041.526] lstrlenW (lpString=".docx") returned 5
	[0041.526] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0041.526] lstrlenW (lpString=".pdf") returned 4
	[0041.526] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0041.526] lstrlenW (lpString=".xls") returned 4
	[0041.526] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0041.526] lstrlenW (lpString=".xlsx") returned 5
	[0041.526] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0041.526] lstrlenW (lpString=".ppt") returned 4
	[0041.526] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0041.526] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72
	[0041.526] lstrlenW (lpString=".zip") returned 4
	[0041.526] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0041.526] lstrlenW (lpString=".rar") returned 4
	[0041.526] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0041.526] lstrlenW (lpString=".bz2") returned 4
	[0041.526] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0041.526] lstrlenW (lpString=".7z") returned 3
	[0041.526] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0041.526] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72
	[0041.526] lstrlenW (lpString=".dbf") returned 4
	[0041.526] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0041.527] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72
	[0041.527] lstrlenW (lpString=".1cd") returned 4
	[0041.527] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0041.527] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72
	[0041.527] lstrlenW (lpString=".jpg") returned 4
	[0041.527] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0041.527] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72
	[0041.527] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72
	[0041.527] lstrlenW (lpString=".doc") returned 4
	[0041.527] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0041.527] lstrlenW (lpString=".docx") returned 5
	[0041.527] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0041.527] lstrlenW (lpString=".pdf") returned 4
	[0041.527] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0041.527] lstrlenW (lpString=".xls") returned 4
	[0041.527] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0041.527] lstrlenW (lpString=".xlsx") returned 5
	[0041.527] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0041.527] lstrlenW (lpString=".ppt") returned 4
	[0041.527] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0041.527] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72
	[0041.527] lstrlenW (lpString=".zip") returned 4
	[0041.527] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0041.527] lstrlenW (lpString=".rar") returned 4
	[0041.527] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0041.527] lstrlenW (lpString=".bz2") returned 4
	[0041.527] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0041.527] lstrlenW (lpString=".7z") returned 3
	[0041.527] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0041.527] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72
	[0041.527] lstrlenW (lpString=".dbf") returned 4
	[0041.527] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0041.527] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72
	[0041.528] lstrlenW (lpString=".1cd") returned 4
	[0041.528] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0041.528] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 72
	[0041.528] lstrlenW (lpString=".jpg") returned 4
	[0041.528] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0041.528] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0041.528] lstrlenW (lpString="WordMUI.msi") returned 11
	[0041.528] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0041.528] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=2522624) returned 1
	[0041.528] CloseHandle (hObject=0x194) returned 1
	[0041.528] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi")) returned 0x2020
	[0041.528] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0041.528] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0041.529] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0041.529] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0x0) returned 1
	[0041.529] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0041.529] ReadFile (in: hFile=0x194, lpBuffer=0x8b40058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b40058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0041.533] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xcd4aa, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0041.533] ReadFile (in: hFile=0x194, lpBuffer=0x8b80058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b80058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0041.543] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0041.543] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x227e00, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0041.543] ReadFile (in: hFile=0x194, lpBuffer=0x8bc0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8bc0058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0041.559] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0041.559] WriteFile (in: hFile=0x194, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x847fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fcb0*=0xc0102, lpOverlapped=0x0) returned 1
	[0041.907] SetEndOfFile (hFile=0x194) returned 1
	[0041.907] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d5d120
	[0041.907] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0041.907] WriteFile (in: hFile=0x194, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0041.909] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xcd4aa, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0041.909] WriteFile (in: hFile=0x194, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0041.915] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x227e00, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0041.915] WriteFile (in: hFile=0x194, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0041.918] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d5d120 | out: hHeap=0x5350000) returned 1
	[0041.918] CloseHandle (hObject=0x194) returned 1
	[0042.556] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0042.556] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74
	[0042.556] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74
	[0042.556] lstrlenW (lpString=".doc") returned 4
	[0042.556] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0042.556] lstrlenW (lpString=".docx") returned 5
	[0042.556] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0042.556] lstrlenW (lpString=".pdf") returned 4
	[0042.556] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0042.557] lstrlenW (lpString=".xls") returned 4
	[0042.557] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0042.557] lstrlenW (lpString=".xlsx") returned 5
	[0042.557] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0042.557] lstrlenW (lpString=".ppt") returned 4
	[0042.557] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0042.557] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74
	[0042.557] lstrlenW (lpString=".zip") returned 4
	[0042.608] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0042.608] lstrlenW (lpString=".rar") returned 4
	[0042.608] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0042.608] lstrlenW (lpString=".bz2") returned 4
	[0042.608] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0042.608] lstrlenW (lpString=".7z") returned 3
	[0042.608] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0042.608] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74
	[0042.609] lstrlenW (lpString=".dbf") returned 4
	[0042.609] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0042.609] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74
	[0042.609] lstrlenW (lpString=".1cd") returned 4
	[0042.609] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0042.609] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74
	[0042.609] lstrlenW (lpString=".jpg") returned 4
	[0042.609] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0042.609] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74
	[0042.609] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74
	[0042.609] lstrlenW (lpString=".doc") returned 4
	[0042.609] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0042.609] lstrlenW (lpString=".docx") returned 5
	[0042.609] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0042.609] lstrlenW (lpString=".pdf") returned 4
	[0042.609] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0042.609] lstrlenW (lpString=".xls") returned 4
	[0042.609] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0042.609] lstrlenW (lpString=".xlsx") returned 5
	[0042.609] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0042.609] lstrlenW (lpString=".ppt") returned 4
	[0042.609] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0042.609] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74
	[0042.609] lstrlenW (lpString=".zip") returned 4
	[0042.609] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0042.609] lstrlenW (lpString=".rar") returned 4
	[0042.609] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0042.609] lstrlenW (lpString=".bz2") returned 4
	[0042.609] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0042.609] lstrlenW (lpString=".7z") returned 3
	[0042.609] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0042.609] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74
	[0042.610] lstrlenW (lpString=".dbf") returned 4
	[0042.610] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0042.610] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74
	[0042.610] lstrlenW (lpString=".1cd") returned 4
	[0042.610] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0042.610] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 74
	[0042.610] lstrlenW (lpString=".jpg") returned 4
	[0042.610] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0042.610] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0042.610] lstrlenW (lpString="Proof.cab") returned 9
	[0042.610] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0043.022] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=13642474) returned 1
	[0043.022] CloseHandle (hObject=0x218) returned 1
	[0043.026] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab")) returned 0x2020
	[0043.026] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0043.026] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0043.618] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0043.618] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0x0) returned 1
	[0043.618] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0043.618] ReadFile (in: hFile=0x218, lpBuffer=0x8b40058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b40058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0043.621] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x4563a3, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0043.621] ReadFile (in: hFile=0x218, lpBuffer=0x8b80058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b80058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0043.626] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0043.626] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0xcc2aea, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0043.626] ReadFile (in: hFile=0x218, lpBuffer=0x8bc0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8bc0058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0043.643] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.643] WriteFile (in: hFile=0x218, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x847fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fcb0*=0xc00fe, lpOverlapped=0x0) returned 1
	[0043.655] SetEndOfFile (hFile=0x218) returned 1
	[0043.655] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8ddd148
	[0043.656] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0043.656] WriteFile (in: hFile=0x218, lpBuffer=0x8ddd148*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8ddd148*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0043.834] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x4563a3, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0043.834] WriteFile (in: hFile=0x218, lpBuffer=0x8ddd148*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8ddd148*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0043.834] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0xcc2aea, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0043.834] WriteFile (in: hFile=0x218, lpBuffer=0x8ddd148*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8ddd148*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0043.836] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8ddd148 | out: hHeap=0x5350000) returned 1
	[0043.856] CloseHandle (hObject=0x218) returned 1
	[0047.432] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0047.432] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0047.432] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0047.432] lstrlenW (lpString=".doc") returned 4
	[0047.432] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0047.432] lstrlenW (lpString=".docx") returned 5
	[0047.432] lstrcmpiW (lpString1=".docx", lpString2="f.cab") returned -1
	[0047.432] lstrlenW (lpString=".pdf") returned 4
	[0047.432] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0047.432] lstrlenW (lpString=".xls") returned 4
	[0047.432] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0047.432] lstrlenW (lpString=".xlsx") returned 5
	[0047.432] lstrcmpiW (lpString1=".xlsx", lpString2="f.cab") returned -1
	[0047.432] lstrlenW (lpString=".ppt") returned 4
	[0047.432] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0047.433] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0047.433] lstrlenW (lpString=".zip") returned 4
	[0047.433] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0047.433] lstrlenW (lpString=".rar") returned 4
	[0047.433] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0047.433] lstrlenW (lpString=".bz2") returned 4
	[0047.433] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0047.433] lstrlenW (lpString=".7z") returned 3
	[0047.433] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0047.433] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0047.433] lstrlenW (lpString=".dbf") returned 4
	[0047.433] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0047.433] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0047.433] lstrlenW (lpString=".1cd") returned 4
	[0047.433] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0047.433] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0047.433] lstrlenW (lpString=".jpg") returned 4
	[0047.433] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0047.433] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0047.433] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0047.433] lstrlenW (lpString=".doc") returned 4
	[0047.433] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0047.433] lstrlenW (lpString=".docx") returned 5
	[0047.433] lstrcmpiW (lpString1=".docx", lpString2="f.cab") returned -1
	[0047.433] lstrlenW (lpString=".pdf") returned 4
	[0047.433] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0047.433] lstrlenW (lpString=".xls") returned 4
	[0047.433] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0047.433] lstrlenW (lpString=".xlsx") returned 5
	[0047.433] lstrcmpiW (lpString1=".xlsx", lpString2="f.cab") returned -1
	[0047.433] lstrlenW (lpString=".ppt") returned 4
	[0047.433] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0047.434] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0047.434] lstrlenW (lpString=".zip") returned 4
	[0047.434] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0047.434] lstrlenW (lpString=".rar") returned 4
	[0047.434] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0047.434] lstrlenW (lpString=".bz2") returned 4
	[0047.434] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0047.434] lstrlenW (lpString=".7z") returned 3
	[0047.434] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0047.434] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0047.434] lstrlenW (lpString=".dbf") returned 4
	[0047.434] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0047.434] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0047.434] lstrlenW (lpString=".1cd") returned 4
	[0047.434] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0047.434] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 81
	[0047.434] lstrlenW (lpString=".jpg") returned 4
	[0047.434] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0047.434] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0047.434] lstrlenW (lpString="OnoteLR.cab") returned 11
	[0047.434] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0047.435] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=17456632) returned 1
	[0047.435] CloseHandle (hObject=0x218) returned 1
	[0047.435] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab")) returned 0x2020
	[0047.435] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.435] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0047.435] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0047.435] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0x0) returned 1
	[0047.435] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.436] ReadFile (in: hFile=0x218, lpBuffer=0x8b40058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b40058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.443] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x58c9fd, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.443] ReadFile (in: hFile=0x218, lpBuffer=0x8b80058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b80058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.449] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0047.449] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x1065df8, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.449] ReadFile (in: hFile=0x218, lpBuffer=0x8bc0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8bc0058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.466] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.466] WriteFile (in: hFile=0x218, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x847fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fcb0*=0xc0102, lpOverlapped=0x0) returned 1
	[0047.630] SetEndOfFile (hFile=0x218) returned 1
	[0047.630] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d9d128
	[0047.634] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.634] WriteFile (in: hFile=0x218, lpBuffer=0x8d9d128*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d9d128*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.635] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x58c9fd, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.635] WriteFile (in: hFile=0x218, lpBuffer=0x8d9d128*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d9d128*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.636] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x1065df8, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.636] WriteFile (in: hFile=0x218, lpBuffer=0x8d9d128*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d9d128*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.638] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d9d128 | out: hHeap=0x5350000) returned 1
	[0047.638] CloseHandle (hObject=0x218) returned 1
	[0047.638] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0047.638] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74
	[0047.638] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74
	[0047.638] lstrlenW (lpString=".doc") returned 4
	[0047.638] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0047.638] lstrlenW (lpString=".docx") returned 5
	[0047.638] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0047.638] lstrlenW (lpString=".pdf") returned 4
	[0047.638] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0047.639] lstrlenW (lpString=".xls") returned 4
	[0047.639] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0047.639] lstrlenW (lpString=".xlsx") returned 5
	[0047.639] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0047.639] lstrlenW (lpString=".ppt") returned 4
	[0047.639] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0047.639] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74
	[0047.639] lstrlenW (lpString=".zip") returned 4
	[0047.639] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0047.639] lstrlenW (lpString=".rar") returned 4
	[0047.639] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0047.639] lstrlenW (lpString=".bz2") returned 4
	[0047.639] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0047.639] lstrlenW (lpString=".7z") returned 3
	[0047.639] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0047.639] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74
	[0047.639] lstrlenW (lpString=".dbf") returned 4
	[0047.639] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0047.639] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74
	[0047.639] lstrlenW (lpString=".1cd") returned 4
	[0047.639] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0047.639] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74
	[0047.639] lstrlenW (lpString=".jpg") returned 4
	[0047.639] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0047.639] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74
	[0047.639] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74
	[0047.639] lstrlenW (lpString=".doc") returned 4
	[0047.639] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0047.639] lstrlenW (lpString=".docx") returned 5
	[0047.639] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0047.639] lstrlenW (lpString=".pdf") returned 4
	[0047.640] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0047.640] lstrlenW (lpString=".xls") returned 4
	[0047.640] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0047.640] lstrlenW (lpString=".xlsx") returned 5
	[0047.640] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0047.640] lstrlenW (lpString=".ppt") returned 4
	[0047.640] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0047.640] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74
	[0047.640] lstrlenW (lpString=".zip") returned 4
	[0047.640] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0047.640] lstrlenW (lpString=".rar") returned 4
	[0047.640] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0047.640] lstrlenW (lpString=".bz2") returned 4
	[0047.640] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0047.640] lstrlenW (lpString=".7z") returned 3
	[0047.640] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0047.640] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74
	[0047.640] lstrlenW (lpString=".dbf") returned 4
	[0047.640] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0047.640] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74
	[0047.640] lstrlenW (lpString=".1cd") returned 4
	[0047.640] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0047.640] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 74
	[0047.640] lstrlenW (lpString=".jpg") returned 4
	[0047.640] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0047.640] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0047.640] lstrlenW (lpString="GrooveLR.cab") returned 12
	[0047.640] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0047.641] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=4095519) returned 1
	[0047.641] CloseHandle (hObject=0x218) returned 1
	[0047.641] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab")) returned 0x2020
	[0047.641] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.641] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0047.642] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0047.642] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0x0) returned 1
	[0047.642] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.642] ReadFile (in: hFile=0x218, lpBuffer=0x8b40058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b40058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.651] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x14d4b5, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.652] ReadFile (in: hFile=0x218, lpBuffer=0x8b80058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b80058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.659] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0047.659] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x3a7e1f, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.659] ReadFile (in: hFile=0x218, lpBuffer=0x8bc0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8bc0058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.676] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.676] WriteFile (in: hFile=0x218, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x847fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0047.860] SetEndOfFile (hFile=0x218) returned 1
	[0047.860] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d6d110
	[0047.922] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.922] WriteFile (in: hFile=0x218, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.924] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x14d4b5, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.924] WriteFile (in: hFile=0x218, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.926] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x3a7e1f, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.926] WriteFile (in: hFile=0x218, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.928] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d6d110 | out: hHeap=0x5350000) returned 1
	[0047.928] CloseHandle (hObject=0x218) returned 1
	[0047.929] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0047.929] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75
	[0047.929] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75
	[0047.929] lstrlenW (lpString=".doc") returned 4
	[0047.929] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0047.929] lstrlenW (lpString=".docx") returned 5
	[0047.929] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0047.929] lstrlenW (lpString=".pdf") returned 4
	[0047.929] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0047.929] lstrlenW (lpString=".xls") returned 4
	[0047.929] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0047.929] lstrlenW (lpString=".xlsx") returned 5
	[0047.929] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0047.929] lstrlenW (lpString=".ppt") returned 4
	[0047.929] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0047.929] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75
	[0047.929] lstrlenW (lpString=".zip") returned 4
	[0047.929] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0047.929] lstrlenW (lpString=".rar") returned 4
	[0047.929] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0047.930] lstrlenW (lpString=".bz2") returned 4
	[0047.930] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0047.930] lstrlenW (lpString=".7z") returned 3
	[0047.930] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0047.930] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75
	[0047.930] lstrlenW (lpString=".dbf") returned 4
	[0047.930] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0047.930] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75
	[0047.930] lstrlenW (lpString=".1cd") returned 4
	[0047.930] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0047.930] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75
	[0047.930] lstrlenW (lpString=".jpg") returned 4
	[0047.930] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0047.930] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75
	[0047.930] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75
	[0047.930] lstrlenW (lpString=".doc") returned 4
	[0047.930] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0047.930] lstrlenW (lpString=".docx") returned 5
	[0047.930] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0047.930] lstrlenW (lpString=".pdf") returned 4
	[0047.930] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0047.930] lstrlenW (lpString=".xls") returned 4
	[0047.930] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0047.930] lstrlenW (lpString=".xlsx") returned 5
	[0047.930] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0047.930] lstrlenW (lpString=".ppt") returned 4
	[0047.930] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0047.930] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75
	[0047.930] lstrlenW (lpString=".zip") returned 4
	[0047.930] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0047.930] lstrlenW (lpString=".rar") returned 4
	[0047.930] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0047.931] lstrlenW (lpString=".bz2") returned 4
	[0047.931] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0047.931] lstrlenW (lpString=".7z") returned 3
	[0047.931] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0047.931] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75
	[0047.931] lstrlenW (lpString=".dbf") returned 4
	[0047.931] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0047.931] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75
	[0047.931] lstrlenW (lpString=".1cd") returned 4
	[0047.931] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0047.931] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 75
	[0047.931] lstrlenW (lpString=".jpg") returned 4
	[0047.931] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0047.931] lstrcmpiW (lpString1=".EXE", lpString2=".beets") returned 1
	[0047.931] lstrlenW (lpString="DW20.EXE") returned 8
	[0047.931] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0047.968] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=838536) returned 1
	[0047.968] CloseHandle (hObject=0x224) returned 1
	[0047.968] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe")) returned 0x2020
	[0048.009] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.009] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0048.009] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.009] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.009] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0048.010] GetLastError () returned 0x0
	[0048.010] ReadFile (in: hFile=0x224, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0xccb88, lpOverlapped=0x0) returned 1
	[0048.036] WriteFile (in: hFile=0x200, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xccb90, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xccb90, lpOverlapped=0x0) returned 1
	[0048.251] ReadFile (in: hFile=0x224, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0048.251] WriteFile (in: hFile=0x200, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xe4, lpOverlapped=0x0) returned 1
	[0048.251] SetEndOfFile (hFile=0x200) returned 1
	[0048.426] CloseHandle (hObject=0x200) returned 1
	[0048.469] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.469] SetEndOfFile (hFile=0x224) returned 1
	[0048.477] CloseHandle (hObject=0x224) returned 1
	[0048.477] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0048.477] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe")) returned 1
	[0048.477] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0048.477] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0048.477] lstrlenW (lpString=".doc") returned 4
	[0048.477] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0048.477] lstrlenW (lpString=".docx") returned 5
	[0048.477] lstrcmpiW (lpString1=".docx", lpString2="0.EXE") returned -1
	[0048.477] lstrlenW (lpString=".pdf") returned 4
	[0048.477] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0048.477] lstrlenW (lpString=".xls") returned 4
	[0048.477] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0048.477] lstrlenW (lpString=".xlsx") returned 5
	[0048.478] lstrcmpiW (lpString1=".xlsx", lpString2="0.EXE") returned -1
	[0048.478] lstrlenW (lpString=".ppt") returned 4
	[0048.478] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0048.478] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0048.478] lstrlenW (lpString=".zip") returned 4
	[0048.478] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0048.478] lstrlenW (lpString=".rar") returned 4
	[0048.478] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0048.478] lstrlenW (lpString=".bz2") returned 4
	[0048.478] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0048.478] lstrlenW (lpString=".7z") returned 3
	[0048.478] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0048.478] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0048.478] lstrlenW (lpString=".dbf") returned 4
	[0048.478] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0048.478] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0048.478] lstrlenW (lpString=".1cd") returned 4
	[0048.478] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0048.478] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0048.478] lstrlenW (lpString=".jpg") returned 4
	[0048.478] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0048.478] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0048.478] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0048.478] lstrlenW (lpString=".doc") returned 4
	[0048.478] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0048.479] lstrlenW (lpString=".docx") returned 5
	[0048.479] lstrcmpiW (lpString1=".docx", lpString2="0.EXE") returned -1
	[0048.479] lstrlenW (lpString=".pdf") returned 4
	[0048.479] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0048.479] lstrlenW (lpString=".xls") returned 4
	[0048.479] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0048.479] lstrlenW (lpString=".xlsx") returned 5
	[0048.479] lstrcmpiW (lpString1=".xlsx", lpString2="0.EXE") returned -1
	[0048.479] lstrlenW (lpString=".ppt") returned 4
	[0048.479] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0048.479] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0048.479] lstrlenW (lpString=".zip") returned 4
	[0048.479] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0048.479] lstrlenW (lpString=".rar") returned 4
	[0048.479] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0048.479] lstrlenW (lpString=".bz2") returned 4
	[0048.479] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0048.479] lstrlenW (lpString=".7z") returned 3
	[0048.479] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0048.479] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0048.479] lstrlenW (lpString=".dbf") returned 4
	[0048.479] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0048.479] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0048.479] lstrlenW (lpString=".1cd") returned 4
	[0048.479] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0048.479] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 71
	[0048.479] lstrlenW (lpString=".jpg") returned 4
	[0048.479] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0048.479] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0048.480] lstrlenW (lpString="msvcr90.dll") returned 11
	[0048.480] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0048.480] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=655872) returned 1
	[0048.480] CloseHandle (hObject=0x224) returned 1
	[0048.480] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll")) returned 0x2020
	[0048.480] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0048.480] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0048.480] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.480] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.480] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0048.480] GetLastError () returned 0x0
	[0048.481] ReadFile (in: hFile=0x224, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0xa0200, lpOverlapped=0x0) returned 1
	[0049.054] WriteFile (in: hFile=0x220, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xa0210, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xa0210, lpOverlapped=0x0) returned 1
	[0049.066] ReadFile (in: hFile=0x224, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.066] WriteFile (in: hFile=0x220, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0049.066] SetEndOfFile (hFile=0x220) returned 1
	[0049.066] CloseHandle (hObject=0x220) returned 1
	[0049.066] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.066] SetEndOfFile (hFile=0x224) returned 1
	[0049.072] CloseHandle (hObject=0x224) returned 1
	[0049.072] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0049.072] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll")) returned 1
	[0049.073] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74
	[0049.073] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74
	[0049.073] lstrlenW (lpString=".doc") returned 4
	[0049.073] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0049.073] lstrlenW (lpString=".docx") returned 5
	[0049.073] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0049.073] lstrlenW (lpString=".pdf") returned 4
	[0049.073] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0049.073] lstrlenW (lpString=".xls") returned 4
	[0049.073] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0049.073] lstrlenW (lpString=".xlsx") returned 5
	[0049.073] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0049.073] lstrlenW (lpString=".ppt") returned 4
	[0049.073] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0049.073] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74
	[0049.073] lstrlenW (lpString=".zip") returned 4
	[0049.073] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0049.073] lstrlenW (lpString=".rar") returned 4
	[0049.073] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0049.073] lstrlenW (lpString=".bz2") returned 4
	[0049.073] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0049.073] lstrlenW (lpString=".7z") returned 3
	[0049.073] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0049.073] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74
	[0049.073] lstrlenW (lpString=".dbf") returned 4
	[0049.073] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0049.073] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74
	[0049.073] lstrlenW (lpString=".1cd") returned 4
	[0049.073] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0049.073] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74
	[0049.073] lstrlenW (lpString=".jpg") returned 4
	[0049.073] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0049.074] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74
	[0049.074] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74
	[0049.074] lstrlenW (lpString=".doc") returned 4
	[0049.074] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0049.074] lstrlenW (lpString=".docx") returned 5
	[0049.074] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0049.074] lstrlenW (lpString=".pdf") returned 4
	[0049.074] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0049.074] lstrlenW (lpString=".xls") returned 4
	[0049.074] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0049.074] lstrlenW (lpString=".xlsx") returned 5
	[0049.074] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0049.074] lstrlenW (lpString=".ppt") returned 4
	[0049.074] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0049.074] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74
	[0049.074] lstrlenW (lpString=".zip") returned 4
	[0049.074] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0049.074] lstrlenW (lpString=".rar") returned 4
	[0049.074] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0049.074] lstrlenW (lpString=".bz2") returned 4
	[0049.074] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0049.074] lstrlenW (lpString=".7z") returned 3
	[0049.074] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0049.074] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74
	[0049.074] lstrlenW (lpString=".dbf") returned 4
	[0049.074] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0049.074] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74
	[0049.074] lstrlenW (lpString=".1cd") returned 4
	[0049.074] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0049.074] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 74
	[0049.074] lstrlenW (lpString=".jpg") returned 4
	[0049.074] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0049.075] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0049.075] lstrlenW (lpString="OfficeMUISet.msi") returned 16
	[0049.075] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0049.075] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=868864) returned 1
	[0049.075] CloseHandle (hObject=0x224) returned 1
	[0049.075] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi")) returned 0x2020
	[0049.075] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.075] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0049.075] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.075] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.075] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0049.076] GetLastError () returned 0x0
	[0049.076] ReadFile (in: hFile=0x224, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0xd4200, lpOverlapped=0x0) returned 1
	[0049.196] WriteFile (in: hFile=0x220, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xd4210, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xd4210, lpOverlapped=0x0) returned 1
	[0049.211] ReadFile (in: hFile=0x224, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.211] WriteFile (in: hFile=0x220, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xf4, lpOverlapped=0x0) returned 1
	[0049.211] SetEndOfFile (hFile=0x220) returned 1
	[0049.211] CloseHandle (hObject=0x220) returned 1
	[0049.211] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.211] SetEndOfFile (hFile=0x224) returned 1
	[0049.218] CloseHandle (hObject=0x224) returned 1
	[0049.218] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0049.219] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi")) returned 1
	[0049.219] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0049.219] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0049.219] lstrlenW (lpString=".doc") returned 4
	[0049.219] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0049.219] lstrlenW (lpString=".docx") returned 5
	[0049.219] lstrcmpiW (lpString1=".docx", lpString2="t.msi") returned -1
	[0049.219] lstrlenW (lpString=".pdf") returned 4
	[0049.219] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0049.219] lstrlenW (lpString=".xls") returned 4
	[0049.219] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0049.219] lstrlenW (lpString=".xlsx") returned 5
	[0049.219] lstrcmpiW (lpString1=".xlsx", lpString2="t.msi") returned -1
	[0049.219] lstrlenW (lpString=".ppt") returned 4
	[0049.219] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0049.219] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0049.219] lstrlenW (lpString=".zip") returned 4
	[0049.219] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0049.219] lstrlenW (lpString=".rar") returned 4
	[0049.219] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0049.219] lstrlenW (lpString=".bz2") returned 4
	[0049.219] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0049.220] lstrlenW (lpString=".7z") returned 3
	[0049.220] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0049.220] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0049.220] lstrlenW (lpString=".dbf") returned 4
	[0049.220] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0049.220] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0049.220] lstrlenW (lpString=".1cd") returned 4
	[0049.220] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0049.220] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0049.220] lstrlenW (lpString=".jpg") returned 4
	[0049.220] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0049.220] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0049.220] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0049.220] lstrlenW (lpString=".doc") returned 4
	[0049.220] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0049.220] lstrlenW (lpString=".docx") returned 5
	[0049.220] lstrcmpiW (lpString1=".docx", lpString2="t.msi") returned -1
	[0049.220] lstrlenW (lpString=".pdf") returned 4
	[0049.220] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0049.220] lstrlenW (lpString=".xls") returned 4
	[0049.220] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0049.220] lstrlenW (lpString=".xlsx") returned 5
	[0049.220] lstrcmpiW (lpString1=".xlsx", lpString2="t.msi") returned -1
	[0049.220] lstrlenW (lpString=".ppt") returned 4
	[0049.220] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0049.220] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0049.220] lstrlenW (lpString=".zip") returned 4
	[0049.220] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0049.220] lstrlenW (lpString=".rar") returned 4
	[0049.220] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0049.220] lstrlenW (lpString=".bz2") returned 4
	[0049.220] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0049.221] lstrlenW (lpString=".7z") returned 3
	[0049.221] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0049.221] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0049.221] lstrlenW (lpString=".dbf") returned 4
	[0049.221] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0049.221] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0049.221] lstrlenW (lpString=".1cd") returned 4
	[0049.221] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0049.221] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 79
	[0049.221] lstrlenW (lpString=".jpg") returned 4
	[0049.221] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0049.221] lstrcmpiW (lpString1=".MST", lpString2=".beets") returned 1
	[0049.221] lstrlenW (lpString="ShellUI.MST") returned 11
	[0049.221] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0049.221] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=3584) returned 1
	[0049.221] CloseHandle (hObject=0x224) returned 1
	[0049.221] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst")) returned 0x2020
	[0049.222] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.222] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0049.222] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.222] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.222] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0049.222] GetLastError () returned 0x0
	[0049.222] ReadFile (in: hFile=0x224, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0xe00, lpOverlapped=0x0) returned 1
	[0049.413] WriteFile (in: hFile=0x220, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xe10, lpOverlapped=0x0) returned 1
	[0049.414] ReadFile (in: hFile=0x224, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.414] WriteFile (in: hFile=0x220, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0049.414] SetEndOfFile (hFile=0x220) returned 1
	[0049.414] CloseHandle (hObject=0x220) returned 1
	[0049.414] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.414] SetEndOfFile (hFile=0x224) returned 1
	[0049.415] CloseHandle (hObject=0x224) returned 1
	[0049.415] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0049.415] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst")) returned 1
	[0049.416] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74
	[0049.416] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74
	[0049.416] lstrlenW (lpString=".doc") returned 4
	[0049.416] lstrcmpiW (lpString1=".doc", lpString2=".MST") returned -1
	[0049.416] lstrlenW (lpString=".docx") returned 5
	[0049.416] lstrcmpiW (lpString1=".docx", lpString2="I.MST") returned -1
	[0049.416] lstrlenW (lpString=".pdf") returned 4
	[0049.416] lstrcmpiW (lpString1=".pdf", lpString2=".MST") returned 1
	[0049.416] lstrlenW (lpString=".xls") returned 4
	[0049.416] lstrcmpiW (lpString1=".xls", lpString2=".MST") returned 1
	[0049.416] lstrlenW (lpString=".xlsx") returned 5
	[0049.416] lstrcmpiW (lpString1=".xlsx", lpString2="I.MST") returned -1
	[0049.416] lstrlenW (lpString=".ppt") returned 4
	[0049.416] lstrcmpiW (lpString1=".ppt", lpString2=".MST") returned 1
	[0049.416] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74
	[0049.416] lstrlenW (lpString=".zip") returned 4
	[0049.416] lstrcmpiW (lpString1=".zip", lpString2=".MST") returned 1
	[0049.416] lstrlenW (lpString=".rar") returned 4
	[0049.416] lstrcmpiW (lpString1=".rar", lpString2=".MST") returned 1
	[0049.416] lstrlenW (lpString=".bz2") returned 4
	[0049.416] lstrcmpiW (lpString1=".bz2", lpString2=".MST") returned -1
	[0049.416] lstrlenW (lpString=".7z") returned 3
	[0049.416] lstrcmpiW (lpString1=".7z", lpString2="MST") returned -1
	[0049.416] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74
	[0049.416] lstrlenW (lpString=".dbf") returned 4
	[0049.416] lstrcmpiW (lpString1=".dbf", lpString2=".MST") returned -1
	[0049.416] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74
	[0049.416] lstrlenW (lpString=".1cd") returned 4
	[0049.416] lstrcmpiW (lpString1=".1cd", lpString2=".MST") returned -1
	[0049.416] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74
	[0049.416] lstrlenW (lpString=".jpg") returned 4
	[0049.417] lstrcmpiW (lpString1=".jpg", lpString2=".MST") returned -1
	[0049.417] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74
	[0049.417] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74
	[0049.417] lstrlenW (lpString=".doc") returned 4
	[0049.417] lstrcmpiW (lpString1=".doc", lpString2=".MST") returned -1
	[0049.417] lstrlenW (lpString=".docx") returned 5
	[0049.417] lstrcmpiW (lpString1=".docx", lpString2="I.MST") returned -1
	[0049.417] lstrlenW (lpString=".pdf") returned 4
	[0049.417] lstrcmpiW (lpString1=".pdf", lpString2=".MST") returned 1
	[0049.417] lstrlenW (lpString=".xls") returned 4
	[0049.417] lstrcmpiW (lpString1=".xls", lpString2=".MST") returned 1
	[0049.417] lstrlenW (lpString=".xlsx") returned 5
	[0049.417] lstrcmpiW (lpString1=".xlsx", lpString2="I.MST") returned -1
	[0049.417] lstrlenW (lpString=".ppt") returned 4
	[0049.417] lstrcmpiW (lpString1=".ppt", lpString2=".MST") returned 1
	[0049.417] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74
	[0049.417] lstrlenW (lpString=".zip") returned 4
	[0049.417] lstrcmpiW (lpString1=".zip", lpString2=".MST") returned 1
	[0049.417] lstrlenW (lpString=".rar") returned 4
	[0049.417] lstrcmpiW (lpString1=".rar", lpString2=".MST") returned 1
	[0049.417] lstrlenW (lpString=".bz2") returned 4
	[0049.417] lstrcmpiW (lpString1=".bz2", lpString2=".MST") returned -1
	[0049.417] lstrlenW (lpString=".7z") returned 3
	[0049.417] lstrcmpiW (lpString1=".7z", lpString2="MST") returned -1
	[0049.417] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74
	[0049.417] lstrlenW (lpString=".dbf") returned 4
	[0049.417] lstrcmpiW (lpString1=".dbf", lpString2=".MST") returned -1
	[0049.417] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74
	[0049.417] lstrlenW (lpString=".1cd") returned 4
	[0049.417] lstrcmpiW (lpString1=".1cd", lpString2=".MST") returned -1
	[0049.417] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 74
	[0049.418] lstrlenW (lpString=".jpg") returned 4
	[0049.418] lstrcmpiW (lpString1=".jpg", lpString2=".MST") returned -1
	[0049.418] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0049.418] lstrlenW (lpString="AccessMUISet.msi") returned 16
	[0049.418] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0049.418] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=868864) returned 1
	[0049.418] CloseHandle (hObject=0x224) returned 1
	[0049.418] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi")) returned 0x2020
	[0049.418] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.418] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0049.418] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.418] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.419] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0049.419] GetLastError () returned 0x0
	[0049.419] ReadFile (in: hFile=0x224, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0xd4200, lpOverlapped=0x0) returned 1
	[0050.318] WriteFile (in: hFile=0x220, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xd4210, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xd4210, lpOverlapped=0x0) returned 1
	[0050.333] ReadFile (in: hFile=0x224, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.333] WriteFile (in: hFile=0x220, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xf4, lpOverlapped=0x0) returned 1
	[0050.333] SetEndOfFile (hFile=0x220) returned 1
	[0050.333] CloseHandle (hObject=0x220) returned 1
	[0050.333] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.333] SetEndOfFile (hFile=0x224) returned 1
	[0050.340] CloseHandle (hObject=0x224) returned 1
	[0050.341] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0050.341] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi")) returned 1
	[0050.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0050.341] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0050.341] lstrlenW (lpString=".doc") returned 4
	[0050.341] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0050.341] lstrlenW (lpString=".docx") returned 5
	[0050.341] lstrcmpiW (lpString1=".docx", lpString2="t.msi") returned -1
	[0050.341] lstrlenW (lpString=".pdf") returned 4
	[0050.341] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0050.341] lstrlenW (lpString=".xls") returned 4
	[0050.341] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0050.341] lstrlenW (lpString=".xlsx") returned 5
	[0050.341] lstrcmpiW (lpString1=".xlsx", lpString2="t.msi") returned -1
	[0050.341] lstrlenW (lpString=".ppt") returned 4
	[0050.341] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0050.342] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0050.342] lstrlenW (lpString=".zip") returned 4
	[0050.342] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0050.342] lstrlenW (lpString=".rar") returned 4
	[0050.342] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0050.342] lstrlenW (lpString=".bz2") returned 4
	[0050.342] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0050.342] lstrlenW (lpString=".7z") returned 3
	[0050.342] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0050.342] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0050.342] lstrlenW (lpString=".dbf") returned 4
	[0050.342] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0050.342] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0050.342] lstrlenW (lpString=".1cd") returned 4
	[0050.342] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0050.342] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0050.342] lstrlenW (lpString=".jpg") returned 4
	[0050.342] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0050.342] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0050.342] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0050.342] lstrlenW (lpString=".doc") returned 4
	[0050.342] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0050.342] lstrlenW (lpString=".docx") returned 5
	[0050.342] lstrcmpiW (lpString1=".docx", lpString2="t.msi") returned -1
	[0050.342] lstrlenW (lpString=".pdf") returned 4
	[0050.342] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0050.342] lstrlenW (lpString=".xls") returned 4
	[0050.342] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0050.342] lstrlenW (lpString=".xlsx") returned 5
	[0050.342] lstrcmpiW (lpString1=".xlsx", lpString2="t.msi") returned -1
	[0050.342] lstrlenW (lpString=".ppt") returned 4
	[0050.342] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0050.343] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0050.343] lstrlenW (lpString=".zip") returned 4
	[0050.343] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0050.343] lstrlenW (lpString=".rar") returned 4
	[0050.343] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0050.343] lstrlenW (lpString=".bz2") returned 4
	[0050.343] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0050.343] lstrlenW (lpString=".7z") returned 3
	[0050.343] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0050.343] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0050.343] lstrlenW (lpString=".dbf") returned 4
	[0050.343] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0050.343] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0050.343] lstrlenW (lpString=".1cd") returned 4
	[0050.343] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0050.343] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 79
	[0050.343] lstrlenW (lpString=".jpg") returned 4
	[0050.343] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0050.343] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0050.343] lstrlenW (lpString="osetup.dll") returned 10
	[0050.343] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0050.344] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=7378792) returned 1
	[0050.344] CloseHandle (hObject=0x224) returned 1
	[0050.344] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll")) returned 0x2020
	[0050.344] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.344] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0050.345] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224
	[0050.345] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0x0) returned 1
	[0050.345] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.345] ReadFile (in: hFile=0x224, lpBuffer=0x8b40058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b40058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.645] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.646] ReadFile (in: hFile=0x224, lpBuffer=0x8b80058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b80058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.712] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0050.712] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.712] ReadFile (in: hFile=0x224, lpBuffer=0x8bc0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8bc0058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.783] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.783] WriteFile (in: hFile=0x224, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x847fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fcb0*=0xc0100, lpOverlapped=0x0) returned 1
	[0050.799] SetEndOfFile (hFile=0x224) returned 1
	[0050.799] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d1d100
	[0050.836] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.836] WriteFile (in: hFile=0x224, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.837] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.837] WriteFile (in: hFile=0x224, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.839] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.839] WriteFile (in: hFile=0x224, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.840] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d1d100 | out: hHeap=0x5350000) returned 1
	[0050.841] CloseHandle (hObject=0x224) returned 1
	[0050.950] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0050.951] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0050.951] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0050.951] lstrlenW (lpString=".doc") returned 4
	[0050.951] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0050.951] lstrlenW (lpString=".docx") returned 5
	[0050.951] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0050.951] lstrlenW (lpString=".pdf") returned 4
	[0050.951] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0050.951] lstrlenW (lpString=".xls") returned 4
	[0050.951] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0050.951] lstrlenW (lpString=".xlsx") returned 5
	[0050.951] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0050.951] lstrlenW (lpString=".ppt") returned 4
	[0050.951] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0050.951] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0050.951] lstrlenW (lpString=".zip") returned 4
	[0050.951] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0050.951] lstrlenW (lpString=".rar") returned 4
	[0050.951] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0050.951] lstrlenW (lpString=".bz2") returned 4
	[0050.951] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0050.951] lstrlenW (lpString=".7z") returned 3
	[0050.951] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0050.951] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0050.951] lstrlenW (lpString=".dbf") returned 4
	[0050.951] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0050.951] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0050.951] lstrlenW (lpString=".1cd") returned 4
	[0050.952] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0050.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0050.952] lstrlenW (lpString=".jpg") returned 4
	[0050.952] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0050.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0050.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0050.952] lstrlenW (lpString=".doc") returned 4
	[0050.952] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0050.952] lstrlenW (lpString=".docx") returned 5
	[0050.952] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0050.952] lstrlenW (lpString=".pdf") returned 4
	[0050.952] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0050.952] lstrlenW (lpString=".xls") returned 4
	[0050.952] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0050.952] lstrlenW (lpString=".xlsx") returned 5
	[0050.952] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0050.952] lstrlenW (lpString=".ppt") returned 4
	[0050.952] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0050.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0050.952] lstrlenW (lpString=".zip") returned 4
	[0050.952] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0050.952] lstrlenW (lpString=".rar") returned 4
	[0050.952] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0050.952] lstrlenW (lpString=".bz2") returned 4
	[0050.952] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0050.952] lstrlenW (lpString=".7z") returned 3
	[0050.952] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0050.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0050.952] lstrlenW (lpString=".dbf") returned 4
	[0050.952] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0050.952] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0050.952] lstrlenW (lpString=".1cd") returned 4
	[0050.953] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0050.953] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0050.953] lstrlenW (lpString=".jpg") returned 4
	[0050.953] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0050.972] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0050.973] lstrlenW (lpString="ProPrWW.cab") returned 11
	[0050.973] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0050.977] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=177720283) returned 1
	[0050.977] CloseHandle (hObject=0x1b8) returned 1
	[0050.977] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab")) returned 0x2020
	[0050.977] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.977] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0050.978] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0050.978] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0x0) returned 1
	[0050.978] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.978] ReadFile (in: hFile=0x1b8, lpBuffer=0x8b40058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b40058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.051] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x387ee9e, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.051] ReadFile (in: hFile=0x1b8, lpBuffer=0x8b80058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b80058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.130] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0051.130] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xa93cbdb, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.130] ReadFile (in: hFile=0x1b8, lpBuffer=0x8bc0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8bc0058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.323] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.323] WriteFile (in: hFile=0x1b8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x847fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fcb0*=0xc0102, lpOverlapped=0x0) returned 1
	[0051.342] SetEndOfFile (hFile=0x1b8) returned 1
	[0051.342] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d3d110
	[0051.345] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.345] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.346] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x387ee9e, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.346] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.347] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xa93cbdb, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.347] WriteFile (in: hFile=0x1b8, lpBuffer=0x8d3d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d3d110*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.578] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d3d110 | out: hHeap=0x5350000) returned 1
	[0051.582] CloseHandle (hObject=0x1b8) returned 1
	[0051.582] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0051.582] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0051.582] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0051.582] lstrlenW (lpString=".doc") returned 4
	[0051.582] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0051.582] lstrlenW (lpString=".docx") returned 5
	[0051.582] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1
	[0051.582] lstrlenW (lpString=".pdf") returned 4
	[0051.582] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0051.582] lstrlenW (lpString=".xls") returned 4
	[0051.582] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0051.582] lstrlenW (lpString=".xlsx") returned 5
	[0051.582] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1
	[0051.582] lstrlenW (lpString=".ppt") returned 4
	[0051.582] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0051.582] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0051.582] lstrlenW (lpString=".zip") returned 4
	[0051.582] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0051.582] lstrlenW (lpString=".rar") returned 4
	[0051.583] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0051.583] lstrlenW (lpString=".bz2") returned 4
	[0051.583] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0051.583] lstrlenW (lpString=".7z") returned 3
	[0051.583] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0051.583] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0051.583] lstrlenW (lpString=".dbf") returned 4
	[0051.583] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0051.583] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0051.583] lstrlenW (lpString=".1cd") returned 4
	[0051.583] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0051.583] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0051.583] lstrlenW (lpString=".jpg") returned 4
	[0051.583] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0051.583] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0051.583] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0051.583] lstrlenW (lpString=".doc") returned 4
	[0051.583] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0051.583] lstrlenW (lpString=".docx") returned 5
	[0051.583] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1
	[0051.583] lstrlenW (lpString=".pdf") returned 4
	[0051.583] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0051.583] lstrlenW (lpString=".xls") returned 4
	[0051.583] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0051.583] lstrlenW (lpString=".xlsx") returned 5
	[0051.583] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1
	[0051.583] lstrlenW (lpString=".ppt") returned 4
	[0051.583] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0051.583] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0051.583] lstrlenW (lpString=".zip") returned 4
	[0051.583] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0051.584] lstrlenW (lpString=".rar") returned 4
	[0051.584] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0051.584] lstrlenW (lpString=".bz2") returned 4
	[0051.584] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0051.584] lstrlenW (lpString=".7z") returned 3
	[0051.584] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0051.584] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0051.584] lstrlenW (lpString=".dbf") returned 4
	[0051.584] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0051.584] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0051.584] lstrlenW (lpString=".1cd") returned 4
	[0051.584] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0051.584] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 74
	[0051.584] lstrlenW (lpString=".jpg") returned 4
	[0051.584] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0051.584] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0051.584] lstrlenW (lpString="PidGenX.dll") returned 11
	[0051.584] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0051.588] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=1463568) returned 1
	[0051.588] CloseHandle (hObject=0x1d4) returned 1
	[0051.588] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 0x2020
	[0051.588] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.589] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0051.589] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.589] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.589] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0051.589] GetLastError () returned 0x0
	[0051.589] ReadFile (in: hFile=0x1d4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0xffff0, lpOverlapped=0x0) returned 1
	[0051.857] WriteFile (in: hFile=0x1f8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xffff0, lpOverlapped=0x0) returned 1
	[0052.123] ReadFile (in: hFile=0x1d4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x65520, lpOverlapped=0x0) returned 1
	[0052.433] WriteFile (in: hFile=0x1f8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x65530, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x65530, lpOverlapped=0x0) returned 1
	[0052.559] ReadFile (in: hFile=0x1d4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0052.559] WriteFile (in: hFile=0x1f8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0052.559] SetEndOfFile (hFile=0x1f8) returned 1
	[0053.097] CloseHandle (hObject=0x1f8) returned 1
	[0053.097] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.097] SetEndOfFile (hFile=0x1d4) returned 1
	[0053.100] CloseHandle (hObject=0x1d4) returned 1
	[0053.101] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0053.101] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 1
	[0053.101] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0053.101] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0053.101] lstrlenW (lpString=".doc") returned 4
	[0053.101] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0053.101] lstrlenW (lpString=".docx") returned 5
	[0053.101] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1
	[0053.101] lstrlenW (lpString=".pdf") returned 4
	[0053.101] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0053.101] lstrlenW (lpString=".xls") returned 4
	[0053.102] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0053.102] lstrlenW (lpString=".xlsx") returned 5
	[0053.102] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1
	[0053.102] lstrlenW (lpString=".ppt") returned 4
	[0053.102] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0053.102] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0053.102] lstrlenW (lpString=".zip") returned 4
	[0053.102] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0053.102] lstrlenW (lpString=".rar") returned 4
	[0053.102] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0053.102] lstrlenW (lpString=".bz2") returned 4
	[0053.102] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0053.102] lstrlenW (lpString=".7z") returned 3
	[0053.102] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0053.102] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0053.102] lstrlenW (lpString=".dbf") returned 4
	[0053.102] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0053.102] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0053.102] lstrlenW (lpString=".1cd") returned 4
	[0053.102] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0053.102] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0053.102] lstrlenW (lpString=".jpg") returned 4
	[0053.102] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0053.102] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0053.102] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0053.102] lstrlenW (lpString=".doc") returned 4
	[0053.102] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0053.102] lstrlenW (lpString=".docx") returned 5
	[0053.102] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1
	[0053.102] lstrlenW (lpString=".pdf") returned 4
	[0053.102] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0053.102] lstrlenW (lpString=".xls") returned 4
	[0053.103] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0053.103] lstrlenW (lpString=".xlsx") returned 5
	[0053.103] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1
	[0053.103] lstrlenW (lpString=".ppt") returned 4
	[0053.103] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0053.103] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0053.103] lstrlenW (lpString=".zip") returned 4
	[0053.103] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0053.103] lstrlenW (lpString=".rar") returned 4
	[0053.103] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0053.103] lstrlenW (lpString=".bz2") returned 4
	[0053.103] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0053.103] lstrlenW (lpString=".7z") returned 3
	[0053.103] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0053.103] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0053.103] lstrlenW (lpString=".dbf") returned 4
	[0053.103] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0053.103] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0053.103] lstrlenW (lpString=".1cd") returned 4
	[0053.103] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0053.103] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 74
	[0053.103] lstrlenW (lpString=".jpg") returned 4
	[0053.103] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0053.103] lstrcmpiW (lpString1=".exe", lpString2=".beets") returned 1
	[0053.103] lstrlenW (lpString="ose.exe") returned 7
	[0053.103] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0053.104] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=174440) returned 1
	[0053.104] CloseHandle (hObject=0x1d4) returned 1
	[0053.104] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 0x2020
	[0053.105] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0053.105] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0053.105] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.105] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.105] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0053.105] GetLastError () returned 0x0
	[0053.105] ReadFile (in: hFile=0x1d4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x2a968, lpOverlapped=0x0) returned 1
	[0053.111] WriteFile (in: hFile=0x1f8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x2a970, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x2a970, lpOverlapped=0x0) returned 1
	[0053.115] ReadFile (in: hFile=0x1d4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0053.115] WriteFile (in: hFile=0x1f8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xe2, lpOverlapped=0x0) returned 1
	[0053.115] SetEndOfFile (hFile=0x1f8) returned 1
	[0053.115] CloseHandle (hObject=0x1f8) returned 1
	[0053.115] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.115] SetEndOfFile (hFile=0x1d4) returned 1
	[0053.117] CloseHandle (hObject=0x1d4) returned 1
	[0053.117] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0053.117] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 1
	[0053.117] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0053.118] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0053.118] lstrlenW (lpString=".doc") returned 4
	[0053.118] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0053.118] lstrlenW (lpString=".docx") returned 5
	[0053.118] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0053.118] lstrlenW (lpString=".pdf") returned 4
	[0053.118] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0053.118] lstrlenW (lpString=".xls") returned 4
	[0053.118] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0053.118] lstrlenW (lpString=".xlsx") returned 5
	[0053.118] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0053.118] lstrlenW (lpString=".ppt") returned 4
	[0053.118] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0053.118] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0053.118] lstrlenW (lpString=".zip") returned 4
	[0053.118] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0053.118] lstrlenW (lpString=".rar") returned 4
	[0053.118] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0053.118] lstrlenW (lpString=".bz2") returned 4
	[0053.118] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0053.118] lstrlenW (lpString=".7z") returned 3
	[0053.118] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0053.118] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0053.118] lstrlenW (lpString=".dbf") returned 4
	[0053.118] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0053.118] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0053.118] lstrlenW (lpString=".1cd") returned 4
	[0053.118] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0053.118] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0053.118] lstrlenW (lpString=".jpg") returned 4
	[0053.118] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0053.118] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0053.119] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0053.119] lstrlenW (lpString=".doc") returned 4
	[0053.119] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0053.119] lstrlenW (lpString=".docx") returned 5
	[0053.119] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0053.119] lstrlenW (lpString=".pdf") returned 4
	[0053.119] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0053.119] lstrlenW (lpString=".xls") returned 4
	[0053.119] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0053.119] lstrlenW (lpString=".xlsx") returned 5
	[0053.119] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0053.119] lstrlenW (lpString=".ppt") returned 4
	[0053.119] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0053.119] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0053.119] lstrlenW (lpString=".zip") returned 4
	[0053.119] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0053.119] lstrlenW (lpString=".rar") returned 4
	[0053.119] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0053.119] lstrlenW (lpString=".bz2") returned 4
	[0053.119] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0053.119] lstrlenW (lpString=".7z") returned 3
	[0053.119] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0053.119] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0053.119] lstrlenW (lpString=".dbf") returned 4
	[0053.119] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0053.119] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0053.119] lstrlenW (lpString=".1cd") returned 4
	[0053.119] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0053.119] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0053.119] lstrlenW (lpString=".jpg") returned 4
	[0053.119] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0053.120] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0053.120] lstrlenW (lpString="osetup.dll") returned 10
	[0053.120] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0053.120] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=7378792) returned 1
	[0053.120] CloseHandle (hObject=0x1d4) returned 1
	[0053.120] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll")) returned 0x2020
	[0053.120] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0053.120] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0053.121] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0053.121] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0x0) returned 1
	[0053.121] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0053.121] ReadFile (in: hFile=0x1d4, lpBuffer=0x8b40058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b40058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0053.125] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0053.125] ReadFile (in: hFile=0x1d4, lpBuffer=0x8b80058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b80058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0053.130] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0053.130] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0053.130] ReadFile (in: hFile=0x1d4, lpBuffer=0x8bc0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8bc0058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0053.491] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.491] WriteFile (in: hFile=0x1d4, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x847fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fcb0*=0xc0100, lpOverlapped=0x0) returned 1
	[0053.506] SetEndOfFile (hFile=0x1d4) returned 1
	[0053.506] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d5d120
	[0053.506] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0053.506] WriteFile (in: hFile=0x1d4, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0053.508] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0053.508] WriteFile (in: hFile=0x1d4, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0053.510] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0053.510] WriteFile (in: hFile=0x1d4, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0053.511] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d5d120 | out: hHeap=0x5350000) returned 1
	[0053.512] CloseHandle (hObject=0x1d4) returned 1
	[0053.512] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0053.512] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0053.512] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0053.512] lstrlenW (lpString=".doc") returned 4
	[0053.512] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0053.512] lstrlenW (lpString=".docx") returned 5
	[0053.512] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0053.512] lstrlenW (lpString=".pdf") returned 4
	[0053.512] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0053.512] lstrlenW (lpString=".xls") returned 4
	[0053.512] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0053.512] lstrlenW (lpString=".xlsx") returned 5
	[0053.512] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0053.512] lstrlenW (lpString=".ppt") returned 4
	[0053.512] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0053.512] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0053.513] lstrlenW (lpString=".zip") returned 4
	[0053.513] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0053.513] lstrlenW (lpString=".rar") returned 4
	[0053.513] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0053.513] lstrlenW (lpString=".bz2") returned 4
	[0053.513] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0053.513] lstrlenW (lpString=".7z") returned 3
	[0053.513] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0053.513] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0053.513] lstrlenW (lpString=".dbf") returned 4
	[0053.513] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0053.513] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0053.513] lstrlenW (lpString=".1cd") returned 4
	[0053.513] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0053.513] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0053.513] lstrlenW (lpString=".jpg") returned 4
	[0053.513] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0053.513] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0053.513] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0053.513] lstrlenW (lpString=".doc") returned 4
	[0053.513] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0053.513] lstrlenW (lpString=".docx") returned 5
	[0053.513] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0053.513] lstrlenW (lpString=".pdf") returned 4
	[0053.513] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0053.513] lstrlenW (lpString=".xls") returned 4
	[0053.513] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0053.513] lstrlenW (lpString=".xlsx") returned 5
	[0053.513] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0053.513] lstrlenW (lpString=".ppt") returned 4
	[0053.513] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0053.513] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0053.514] lstrlenW (lpString=".zip") returned 4
	[0053.514] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0053.514] lstrlenW (lpString=".rar") returned 4
	[0053.514] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0053.514] lstrlenW (lpString=".bz2") returned 4
	[0053.514] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0053.514] lstrlenW (lpString=".7z") returned 3
	[0053.514] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0053.514] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0053.514] lstrlenW (lpString=".dbf") returned 4
	[0053.514] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0053.514] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0053.514] lstrlenW (lpString=".1cd") returned 4
	[0053.514] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0053.514] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 73
	[0053.514] lstrlenW (lpString=".jpg") returned 4
	[0053.514] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0053.514] lstrcmpiW (lpString1=".xrm-ms", lpString2=".beets") returned 1
	[0053.514] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24
	[0053.514] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0053.515] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=715834) returned 1
	[0053.515] CloseHandle (hObject=0x1d4) returned 1
	[0053.515] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 0x2020
	[0053.515] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0053.515] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0053.515] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.515] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.515] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0053.515] GetLastError () returned 0x0
	[0053.515] ReadFile (in: hFile=0x1d4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0xaec3a, lpOverlapped=0x0) returned 1
	[0053.723] WriteFile (in: hFile=0x228, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xaec40, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xaec40, lpOverlapped=0x0) returned 1
	[0053.734] ReadFile (in: hFile=0x1d4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0053.734] WriteFile (in: hFile=0x228, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x104, lpOverlapped=0x0) returned 1
	[0053.734] SetEndOfFile (hFile=0x228) returned 1
	[0053.734] CloseHandle (hObject=0x228) returned 1
	[0053.735] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.735] SetEndOfFile (hFile=0x1d4) returned 1
	[0053.740] CloseHandle (hObject=0x1d4) returned 1
	[0053.741] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0053.741] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 1
	[0053.922] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.922] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.922] lstrlenW (lpString=".doc") returned 4
	[0053.922] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0053.922] lstrlenW (lpString=".docx") returned 5
	[0053.922] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0053.922] lstrlenW (lpString=".pdf") returned 4
	[0053.922] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0053.922] lstrlenW (lpString=".xls") returned 4
	[0053.922] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0053.922] lstrlenW (lpString=".xlsx") returned 5
	[0053.922] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0053.922] lstrlenW (lpString=".ppt") returned 4
	[0053.922] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0053.922] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.922] lstrlenW (lpString=".zip") returned 4
	[0053.922] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0053.922] lstrlenW (lpString=".rar") returned 4
	[0053.922] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0053.922] lstrlenW (lpString=".bz2") returned 4
	[0053.922] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0053.922] lstrlenW (lpString=".7z") returned 3
	[0053.922] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0053.922] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.922] lstrlenW (lpString=".dbf") returned 4
	[0053.922] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0053.922] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.922] lstrlenW (lpString=".1cd") returned 4
	[0053.922] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0053.923] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.923] lstrlenW (lpString=".jpg") returned 4
	[0053.923] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0053.923] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.923] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.923] lstrlenW (lpString=".doc") returned 4
	[0053.923] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0053.923] lstrlenW (lpString=".docx") returned 5
	[0053.923] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0053.923] lstrlenW (lpString=".pdf") returned 4
	[0053.923] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0053.923] lstrlenW (lpString=".xls") returned 4
	[0053.923] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0053.923] lstrlenW (lpString=".xlsx") returned 5
	[0053.923] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0053.923] lstrlenW (lpString=".ppt") returned 4
	[0053.923] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0053.923] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.923] lstrlenW (lpString=".zip") returned 4
	[0053.923] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0053.923] lstrlenW (lpString=".rar") returned 4
	[0053.923] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0053.923] lstrlenW (lpString=".bz2") returned 4
	[0053.923] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0053.923] lstrlenW (lpString=".7z") returned 3
	[0053.923] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0053.923] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.923] lstrlenW (lpString=".dbf") returned 4
	[0053.923] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0053.923] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.923] lstrlenW (lpString=".1cd") returned 4
	[0053.924] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0053.924] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 87
	[0053.924] lstrlenW (lpString=".jpg") returned 4
	[0053.924] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0053.924] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0053.924] lstrlenW (lpString="VisiorWW.cab") returned 12
	[0053.924] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0054.973] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=195011319) returned 1
	[0054.973] CloseHandle (hObject=0x1ec) returned 1
	[0054.974] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab")) returned 0x2020
	[0055.091] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.091] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0055.092] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0055.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0x0) returned 1
	[0055.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0055.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x8b40058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b40058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0055.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x3dfe0fd, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0055.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x8b80058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8b80058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0055.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x847fc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0055.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xb9ba2f7, lpNewFilePointer=0x0, dwMoveMethod=0x847fc2c | out: lpNewFilePointer=0x0) returned 1
	[0055.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x8bc0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x847fc38, lpOverlapped=0x0 | out: lpBuffer=0x8bc0058*, lpNumberOfBytesRead=0x847fc38*=0x40000, lpOverlapped=0x0) returned 1
	[0055.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x847fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0055.371] SetEndOfFile (hFile=0x1ec) returned 1
	[0055.372] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d5d120
	[0055.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0055.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0055.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x3dfe0fd, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0055.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0055.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xb9ba2f7, lpNewFilePointer=0x0, dwMoveMethod=0x847fc7c | out: lpNewFilePointer=0x0) returned 1
	[0055.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x8d5d120*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x847fc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d120*, lpNumberOfBytesWritten=0x847fc88*=0x40000, lpOverlapped=0x0) returned 1
	[0055.381] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d5d120 | out: hHeap=0x5350000) returned 1
	[0055.381] CloseHandle (hObject=0x1ec) returned 1
	[0055.381] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0055.381] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0055.381] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0055.381] lstrlenW (lpString=".doc") returned 4
	[0055.381] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0055.381] lstrlenW (lpString=".docx") returned 5
	[0055.381] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1
	[0055.381] lstrlenW (lpString=".pdf") returned 4
	[0055.381] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0055.381] lstrlenW (lpString=".xls") returned 4
	[0055.381] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0055.381] lstrlenW (lpString=".xlsx") returned 5
	[0055.381] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1
	[0055.381] lstrlenW (lpString=".ppt") returned 4
	[0055.381] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0055.381] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0055.381] lstrlenW (lpString=".zip") returned 4
	[0055.381] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0055.382] lstrlenW (lpString=".rar") returned 4
	[0055.382] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0055.382] lstrlenW (lpString=".bz2") returned 4
	[0055.382] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0055.382] lstrlenW (lpString=".7z") returned 3
	[0055.382] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0055.382] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0055.382] lstrlenW (lpString=".dbf") returned 4
	[0055.382] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0055.382] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0055.382] lstrlenW (lpString=".1cd") returned 4
	[0055.382] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0055.382] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0055.382] lstrlenW (lpString=".jpg") returned 4
	[0055.382] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0055.382] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0055.382] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0055.382] lstrlenW (lpString=".doc") returned 4
	[0055.382] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0055.382] lstrlenW (lpString=".docx") returned 5
	[0055.382] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1
	[0055.382] lstrlenW (lpString=".pdf") returned 4
	[0055.382] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0055.382] lstrlenW (lpString=".xls") returned 4
	[0055.382] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0055.382] lstrlenW (lpString=".xlsx") returned 5
	[0055.382] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1
	[0055.382] lstrlenW (lpString=".ppt") returned 4
	[0055.382] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0055.382] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0055.382] lstrlenW (lpString=".zip") returned 4
	[0055.382] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0055.383] lstrlenW (lpString=".rar") returned 4
	[0055.383] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0055.383] lstrlenW (lpString=".bz2") returned 4
	[0055.383] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0055.383] lstrlenW (lpString=".7z") returned 3
	[0055.383] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0055.383] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0055.383] lstrlenW (lpString=".dbf") returned 4
	[0055.383] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0055.383] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0055.383] lstrlenW (lpString=".1cd") returned 4
	[0055.383] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0055.383] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 75
	[0055.383] lstrlenW (lpString=".jpg") returned 4
	[0055.383] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0055.383] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0055.383] lstrlenW (lpString="EEINTL.DLL") returned 10
	[0055.383] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0055.384] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=64096) returned 1
	[0055.384] CloseHandle (hObject=0x1ec) returned 1
	[0055.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll")) returned 0x20
	[0055.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.385] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0055.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.385] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0055.385] GetLastError () returned 0x0
	[0055.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0xfa60, lpOverlapped=0x0) returned 1
	[0055.388] WriteFile (in: hFile=0x20c, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xfa70, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xfa70, lpOverlapped=0x0) returned 1
	[0055.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.390] WriteFile (in: hFile=0x20c, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0055.390] SetEndOfFile (hFile=0x20c) returned 1
	[0055.390] CloseHandle (hObject=0x20c) returned 1
	[0055.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.391] SetEndOfFile (hFile=0x1ec) returned 1
	[0055.392] CloseHandle (hObject=0x1ec) returned 1
	[0055.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.392] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll")) returned 1
	[0055.392] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71
	[0055.392] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71
	[0055.392] lstrlenW (lpString=".doc") returned 4
	[0055.392] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0055.392] lstrlenW (lpString=".docx") returned 5
	[0055.392] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1
	[0055.392] lstrlenW (lpString=".pdf") returned 4
	[0055.392] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0055.392] lstrlenW (lpString=".xls") returned 4
	[0055.392] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0055.392] lstrlenW (lpString=".xlsx") returned 5
	[0055.392] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1
	[0055.392] lstrlenW (lpString=".ppt") returned 4
	[0055.392] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0055.393] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71
	[0055.393] lstrlenW (lpString=".zip") returned 4
	[0055.393] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0055.393] lstrlenW (lpString=".rar") returned 4
	[0055.393] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0055.393] lstrlenW (lpString=".bz2") returned 4
	[0055.393] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0055.393] lstrlenW (lpString=".7z") returned 3
	[0055.393] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0055.393] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71
	[0055.393] lstrlenW (lpString=".dbf") returned 4
	[0055.393] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0055.393] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71
	[0055.393] lstrlenW (lpString=".1cd") returned 4
	[0055.393] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0055.393] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71
	[0055.393] lstrlenW (lpString=".jpg") returned 4
	[0055.393] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0055.393] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71
	[0055.393] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71
	[0055.393] lstrlenW (lpString=".doc") returned 4
	[0055.393] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0055.393] lstrlenW (lpString=".docx") returned 5
	[0055.393] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1
	[0055.393] lstrlenW (lpString=".pdf") returned 4
	[0055.393] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0055.393] lstrlenW (lpString=".xls") returned 4
	[0055.393] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0055.393] lstrlenW (lpString=".xlsx") returned 5
	[0055.393] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1
	[0055.393] lstrlenW (lpString=".ppt") returned 4
	[0055.393] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0055.394] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71
	[0055.394] lstrlenW (lpString=".zip") returned 4
	[0055.394] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0055.394] lstrlenW (lpString=".rar") returned 4
	[0055.394] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0055.394] lstrlenW (lpString=".bz2") returned 4
	[0055.394] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0055.394] lstrlenW (lpString=".7z") returned 3
	[0055.394] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0055.394] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71
	[0055.394] lstrlenW (lpString=".dbf") returned 4
	[0055.394] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0055.394] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71
	[0055.394] lstrlenW (lpString=".1cd") returned 4
	[0055.394] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0055.394] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL") returned 71
	[0055.394] lstrlenW (lpString=".jpg") returned 4
	[0055.394] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0055.394] lstrcmpiW (lpString1=".CNT", lpString2=".beets") returned 1
	[0055.394] lstrlenW (lpString="EQNEDT32.CNT") returned 12
	[0055.394] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0055.395] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=2557) returned 1
	[0055.396] CloseHandle (hObject=0x1ec) returned 1
	[0055.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt")) returned 0x20
	[0055.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.396] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0055.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.396] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0055.396] GetLastError () returned 0x0
	[0055.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x9fd, lpOverlapped=0x0) returned 1
	[0055.398] WriteFile (in: hFile=0x20c, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xa00, lpOverlapped=0x0) returned 1
	[0055.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.399] WriteFile (in: hFile=0x20c, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0055.399] SetEndOfFile (hFile=0x20c) returned 1
	[0055.399] CloseHandle (hObject=0x20c) returned 1
	[0055.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.399] SetEndOfFile (hFile=0x1ec) returned 1
	[0055.400] CloseHandle (hObject=0x1ec) returned 1
	[0055.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.401] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt")) returned 1
	[0055.401] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68
	[0055.401] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68
	[0055.401] lstrlenW (lpString=".doc") returned 4
	[0055.401] lstrcmpiW (lpString1=".doc", lpString2=".CNT") returned 1
	[0055.401] lstrlenW (lpString=".docx") returned 5
	[0055.401] lstrcmpiW (lpString1=".docx", lpString2="2.CNT") returned -1
	[0055.401] lstrlenW (lpString=".pdf") returned 4
	[0055.401] lstrcmpiW (lpString1=".pdf", lpString2=".CNT") returned 1
	[0055.401] lstrlenW (lpString=".xls") returned 4
	[0055.401] lstrcmpiW (lpString1=".xls", lpString2=".CNT") returned 1
	[0055.401] lstrlenW (lpString=".xlsx") returned 5
	[0055.401] lstrcmpiW (lpString1=".xlsx", lpString2="2.CNT") returned -1
	[0055.401] lstrlenW (lpString=".ppt") returned 4
	[0055.401] lstrcmpiW (lpString1=".ppt", lpString2=".CNT") returned 1
	[0055.401] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68
	[0055.401] lstrlenW (lpString=".zip") returned 4
	[0055.401] lstrcmpiW (lpString1=".zip", lpString2=".CNT") returned 1
	[0055.401] lstrlenW (lpString=".rar") returned 4
	[0055.401] lstrcmpiW (lpString1=".rar", lpString2=".CNT") returned 1
	[0055.401] lstrlenW (lpString=".bz2") returned 4
	[0055.401] lstrcmpiW (lpString1=".bz2", lpString2=".CNT") returned -1
	[0055.401] lstrlenW (lpString=".7z") returned 3
	[0055.401] lstrcmpiW (lpString1=".7z", lpString2="CNT") returned -1
	[0055.401] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68
	[0055.401] lstrlenW (lpString=".dbf") returned 4
	[0055.401] lstrcmpiW (lpString1=".dbf", lpString2=".CNT") returned 1
	[0055.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68
	[0055.402] lstrlenW (lpString=".1cd") returned 4
	[0055.402] lstrcmpiW (lpString1=".1cd", lpString2=".CNT") returned -1
	[0055.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68
	[0055.402] lstrlenW (lpString=".jpg") returned 4
	[0055.402] lstrcmpiW (lpString1=".jpg", lpString2=".CNT") returned 1
	[0055.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68
	[0055.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68
	[0055.402] lstrlenW (lpString=".doc") returned 4
	[0055.402] lstrcmpiW (lpString1=".doc", lpString2=".CNT") returned 1
	[0055.402] lstrlenW (lpString=".docx") returned 5
	[0055.402] lstrcmpiW (lpString1=".docx", lpString2="2.CNT") returned -1
	[0055.402] lstrlenW (lpString=".pdf") returned 4
	[0055.402] lstrcmpiW (lpString1=".pdf", lpString2=".CNT") returned 1
	[0055.402] lstrlenW (lpString=".xls") returned 4
	[0055.402] lstrcmpiW (lpString1=".xls", lpString2=".CNT") returned 1
	[0055.402] lstrlenW (lpString=".xlsx") returned 5
	[0055.402] lstrcmpiW (lpString1=".xlsx", lpString2="2.CNT") returned -1
	[0055.402] lstrlenW (lpString=".ppt") returned 4
	[0055.402] lstrcmpiW (lpString1=".ppt", lpString2=".CNT") returned 1
	[0055.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68
	[0055.402] lstrlenW (lpString=".zip") returned 4
	[0055.402] lstrcmpiW (lpString1=".zip", lpString2=".CNT") returned 1
	[0055.402] lstrlenW (lpString=".rar") returned 4
	[0055.402] lstrcmpiW (lpString1=".rar", lpString2=".CNT") returned 1
	[0055.402] lstrlenW (lpString=".bz2") returned 4
	[0055.402] lstrcmpiW (lpString1=".bz2", lpString2=".CNT") returned -1
	[0055.402] lstrlenW (lpString=".7z") returned 3
	[0055.402] lstrcmpiW (lpString1=".7z", lpString2="CNT") returned -1
	[0055.402] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68
	[0055.402] lstrlenW (lpString=".dbf") returned 4
	[0055.402] lstrcmpiW (lpString1=".dbf", lpString2=".CNT") returned 1
	[0055.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68
	[0055.403] lstrlenW (lpString=".1cd") returned 4
	[0055.403] lstrcmpiW (lpString1=".1cd", lpString2=".CNT") returned -1
	[0055.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT") returned 68
	[0055.403] lstrlenW (lpString=".jpg") returned 4
	[0055.403] lstrcmpiW (lpString1=".jpg", lpString2=".CNT") returned 1
	[0055.403] lstrcmpiW (lpString1=".EXE", lpString2=".beets") returned 1
	[0055.403] lstrlenW (lpString="EQNEDT32.EXE") returned 12
	[0055.403] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0055.574] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=543304) returned 1
	[0055.590] CloseHandle (hObject=0x1b8) returned 1
	[0055.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe")) returned 0x20
	[0055.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0055.591] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.591] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0055.591] GetLastError () returned 0x0
	[0055.591] ReadFile (in: hFile=0x1b8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x84a48, lpOverlapped=0x0) returned 1
	[0055.603] WriteFile (in: hFile=0x1e4, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x84a50, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x84a50, lpOverlapped=0x0) returned 1
	[0055.614] ReadFile (in: hFile=0x1b8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.614] WriteFile (in: hFile=0x1e4, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0055.614] SetEndOfFile (hFile=0x1e4) returned 1
	[0055.615] CloseHandle (hObject=0x1e4) returned 1
	[0055.615] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.615] SetEndOfFile (hFile=0x1b8) returned 1
	[0055.620] CloseHandle (hObject=0x1b8) returned 1
	[0055.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.620] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe")) returned 1
	[0055.620] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68
	[0055.620] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68
	[0055.620] lstrlenW (lpString=".doc") returned 4
	[0055.620] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0055.620] lstrlenW (lpString=".docx") returned 5
	[0055.620] lstrcmpiW (lpString1=".docx", lpString2="2.EXE") returned -1
	[0055.620] lstrlenW (lpString=".pdf") returned 4
	[0055.621] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0055.621] lstrlenW (lpString=".xls") returned 4
	[0055.621] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0055.621] lstrlenW (lpString=".xlsx") returned 5
	[0055.621] lstrcmpiW (lpString1=".xlsx", lpString2="2.EXE") returned -1
	[0055.621] lstrlenW (lpString=".ppt") returned 4
	[0055.621] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0055.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68
	[0055.621] lstrlenW (lpString=".zip") returned 4
	[0055.621] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0055.621] lstrlenW (lpString=".rar") returned 4
	[0055.621] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0055.621] lstrlenW (lpString=".bz2") returned 4
	[0055.621] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0055.621] lstrlenW (lpString=".7z") returned 3
	[0055.621] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0055.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68
	[0055.621] lstrlenW (lpString=".dbf") returned 4
	[0055.621] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0055.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68
	[0055.621] lstrlenW (lpString=".1cd") returned 4
	[0055.621] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0055.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68
	[0055.621] lstrlenW (lpString=".jpg") returned 4
	[0055.621] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0055.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68
	[0055.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68
	[0055.621] lstrlenW (lpString=".doc") returned 4
	[0055.621] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0055.621] lstrlenW (lpString=".docx") returned 5
	[0055.622] lstrcmpiW (lpString1=".docx", lpString2="2.EXE") returned -1
	[0055.622] lstrlenW (lpString=".pdf") returned 4
	[0055.622] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0055.622] lstrlenW (lpString=".xls") returned 4
	[0055.622] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0055.622] lstrlenW (lpString=".xlsx") returned 5
	[0055.622] lstrcmpiW (lpString1=".xlsx", lpString2="2.EXE") returned -1
	[0055.622] lstrlenW (lpString=".ppt") returned 4
	[0055.622] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0055.622] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68
	[0055.622] lstrlenW (lpString=".zip") returned 4
	[0055.622] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0055.622] lstrlenW (lpString=".rar") returned 4
	[0055.622] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0055.622] lstrlenW (lpString=".bz2") returned 4
	[0055.622] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0055.622] lstrlenW (lpString=".7z") returned 3
	[0055.622] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0055.622] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68
	[0055.622] lstrlenW (lpString=".dbf") returned 4
	[0055.622] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0055.622] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68
	[0055.622] lstrlenW (lpString=".1cd") returned 4
	[0055.622] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0055.622] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE") returned 68
	[0055.622] lstrlenW (lpString=".jpg") returned 4
	[0055.623] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0055.623] lstrcmpiW (lpString1=".TTF", lpString2=".beets") returned 1
	[0055.623] lstrlenW (lpString="MTEXTRA.TTF") returned 11
	[0055.623] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0055.623] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=7656) returned 1
	[0055.623] CloseHandle (hObject=0x1b8) returned 1
	[0055.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf")) returned 0x20
	[0055.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.624] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0055.624] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.624] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.624] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0055.624] GetLastError () returned 0x0
	[0055.624] ReadFile (in: hFile=0x1b8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x1de8, lpOverlapped=0x0) returned 1
	[0055.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x1df0, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x1df0, lpOverlapped=0x0) returned 1
	[0055.883] ReadFile (in: hFile=0x1b8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.883] WriteFile (in: hFile=0x1e4, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0055.883] SetEndOfFile (hFile=0x1e4) returned 1
	[0055.883] CloseHandle (hObject=0x1e4) returned 1
	[0055.883] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.883] SetEndOfFile (hFile=0x1b8) returned 1
	[0055.884] CloseHandle (hObject=0x1b8) returned 1
	[0055.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.884] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf")) returned 1
	[0055.884] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67
	[0055.884] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67
	[0055.884] lstrlenW (lpString=".doc") returned 4
	[0055.884] lstrcmpiW (lpString1=".doc", lpString2=".TTF") returned -1
	[0055.884] lstrlenW (lpString=".docx") returned 5
	[0055.885] lstrcmpiW (lpString1=".docx", lpString2="A.TTF") returned -1
	[0055.885] lstrlenW (lpString=".pdf") returned 4
	[0055.885] lstrcmpiW (lpString1=".pdf", lpString2=".TTF") returned -1
	[0055.885] lstrlenW (lpString=".xls") returned 4
	[0055.885] lstrcmpiW (lpString1=".xls", lpString2=".TTF") returned 1
	[0055.885] lstrlenW (lpString=".xlsx") returned 5
	[0055.885] lstrcmpiW (lpString1=".xlsx", lpString2="A.TTF") returned -1
	[0055.885] lstrlenW (lpString=".ppt") returned 4
	[0055.885] lstrcmpiW (lpString1=".ppt", lpString2=".TTF") returned -1
	[0055.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67
	[0055.885] lstrlenW (lpString=".zip") returned 4
	[0055.885] lstrcmpiW (lpString1=".zip", lpString2=".TTF") returned 1
	[0055.885] lstrlenW (lpString=".rar") returned 4
	[0055.885] lstrcmpiW (lpString1=".rar", lpString2=".TTF") returned -1
	[0055.885] lstrlenW (lpString=".bz2") returned 4
	[0055.885] lstrcmpiW (lpString1=".bz2", lpString2=".TTF") returned -1
	[0055.885] lstrlenW (lpString=".7z") returned 3
	[0055.885] lstrcmpiW (lpString1=".7z", lpString2="TTF") returned -1
	[0055.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67
	[0055.885] lstrlenW (lpString=".dbf") returned 4
	[0055.885] lstrcmpiW (lpString1=".dbf", lpString2=".TTF") returned -1
	[0055.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67
	[0055.885] lstrlenW (lpString=".1cd") returned 4
	[0055.885] lstrcmpiW (lpString1=".1cd", lpString2=".TTF") returned -1
	[0055.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67
	[0055.885] lstrlenW (lpString=".jpg") returned 4
	[0055.885] lstrcmpiW (lpString1=".jpg", lpString2=".TTF") returned -1
	[0055.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67
	[0055.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67
	[0055.885] lstrlenW (lpString=".doc") returned 4
	[0055.885] lstrcmpiW (lpString1=".doc", lpString2=".TTF") returned -1
	[0055.885] lstrlenW (lpString=".docx") returned 5
	[0055.886] lstrcmpiW (lpString1=".docx", lpString2="A.TTF") returned -1
	[0055.886] lstrlenW (lpString=".pdf") returned 4
	[0055.886] lstrcmpiW (lpString1=".pdf", lpString2=".TTF") returned -1
	[0055.886] lstrlenW (lpString=".xls") returned 4
	[0055.886] lstrcmpiW (lpString1=".xls", lpString2=".TTF") returned 1
	[0055.886] lstrlenW (lpString=".xlsx") returned 5
	[0055.886] lstrcmpiW (lpString1=".xlsx", lpString2="A.TTF") returned -1
	[0055.886] lstrlenW (lpString=".ppt") returned 4
	[0055.886] lstrcmpiW (lpString1=".ppt", lpString2=".TTF") returned -1
	[0055.886] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67
	[0055.886] lstrlenW (lpString=".zip") returned 4
	[0055.886] lstrcmpiW (lpString1=".zip", lpString2=".TTF") returned 1
	[0055.886] lstrlenW (lpString=".rar") returned 4
	[0055.886] lstrcmpiW (lpString1=".rar", lpString2=".TTF") returned -1
	[0055.886] lstrlenW (lpString=".bz2") returned 4
	[0055.886] lstrcmpiW (lpString1=".bz2", lpString2=".TTF") returned -1
	[0055.886] lstrlenW (lpString=".7z") returned 3
	[0055.886] lstrcmpiW (lpString1=".7z", lpString2="TTF") returned -1
	[0055.886] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67
	[0055.886] lstrlenW (lpString=".dbf") returned 4
	[0055.886] lstrcmpiW (lpString1=".dbf", lpString2=".TTF") returned -1
	[0055.886] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67
	[0055.886] lstrlenW (lpString=".1cd") returned 4
	[0055.886] lstrcmpiW (lpString1=".1cd", lpString2=".TTF") returned -1
	[0055.886] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF") returned 67
	[0055.886] lstrlenW (lpString=".jpg") returned 4
	[0055.886] lstrcmpiW (lpString1=".jpg", lpString2=".TTF") returned -1
	[0055.886] lstrcmpiW (lpString1=".CFG", lpString2=".beets") returned 1
	[0055.886] lstrlenW (lpString="CGMIMP32.CFG") returned 12
	[0055.887] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0055.887] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=6811) returned 1
	[0055.887] CloseHandle (hObject=0x1b8) returned 1
	[0055.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg")) returned 0x20
	[0055.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.887] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0055.887] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.887] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.887] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0055.888] GetLastError () returned 0x0
	[0055.888] ReadFile (in: hFile=0x1b8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x1a9b, lpOverlapped=0x0) returned 1
	[0055.889] WriteFile (in: hFile=0x1e4, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x1aa0, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x1aa0, lpOverlapped=0x0) returned 1
	[0055.891] ReadFile (in: hFile=0x1b8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.891] WriteFile (in: hFile=0x1e4, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0055.891] SetEndOfFile (hFile=0x1e4) returned 1
	[0055.891] CloseHandle (hObject=0x1e4) returned 1
	[0055.891] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.891] SetEndOfFile (hFile=0x1b8) returned 1
	[0055.892] CloseHandle (hObject=0x1b8) returned 1
	[0055.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.892] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg")) returned 1
	[0055.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67
	[0055.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67
	[0055.893] lstrlenW (lpString=".doc") returned 4
	[0055.893] lstrcmpiW (lpString1=".doc", lpString2=".CFG") returned 1
	[0055.893] lstrlenW (lpString=".docx") returned 5
	[0055.893] lstrcmpiW (lpString1=".docx", lpString2="2.CFG") returned -1
	[0055.893] lstrlenW (lpString=".pdf") returned 4
	[0055.893] lstrcmpiW (lpString1=".pdf", lpString2=".CFG") returned 1
	[0055.893] lstrlenW (lpString=".xls") returned 4
	[0055.893] lstrcmpiW (lpString1=".xls", lpString2=".CFG") returned 1
	[0055.893] lstrlenW (lpString=".xlsx") returned 5
	[0055.893] lstrcmpiW (lpString1=".xlsx", lpString2="2.CFG") returned -1
	[0055.893] lstrlenW (lpString=".ppt") returned 4
	[0055.893] lstrcmpiW (lpString1=".ppt", lpString2=".CFG") returned 1
	[0055.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67
	[0055.893] lstrlenW (lpString=".zip") returned 4
	[0055.893] lstrcmpiW (lpString1=".zip", lpString2=".CFG") returned 1
	[0055.893] lstrlenW (lpString=".rar") returned 4
	[0055.893] lstrcmpiW (lpString1=".rar", lpString2=".CFG") returned 1
	[0055.893] lstrlenW (lpString=".bz2") returned 4
	[0055.893] lstrcmpiW (lpString1=".bz2", lpString2=".CFG") returned -1
	[0055.893] lstrlenW (lpString=".7z") returned 3
	[0055.893] lstrcmpiW (lpString1=".7z", lpString2="CFG") returned -1
	[0055.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67
	[0055.893] lstrlenW (lpString=".dbf") returned 4
	[0055.893] lstrcmpiW (lpString1=".dbf", lpString2=".CFG") returned 1
	[0055.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67
	[0055.893] lstrlenW (lpString=".1cd") returned 4
	[0055.893] lstrcmpiW (lpString1=".1cd", lpString2=".CFG") returned -1
	[0055.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67
	[0055.893] lstrlenW (lpString=".jpg") returned 4
	[0055.894] lstrcmpiW (lpString1=".jpg", lpString2=".CFG") returned 1
	[0055.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67
	[0055.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67
	[0055.894] lstrlenW (lpString=".doc") returned 4
	[0055.894] lstrcmpiW (lpString1=".doc", lpString2=".CFG") returned 1
	[0055.894] lstrlenW (lpString=".docx") returned 5
	[0055.894] lstrcmpiW (lpString1=".docx", lpString2="2.CFG") returned -1
	[0055.894] lstrlenW (lpString=".pdf") returned 4
	[0055.894] lstrcmpiW (lpString1=".pdf", lpString2=".CFG") returned 1
	[0055.894] lstrlenW (lpString=".xls") returned 4
	[0055.894] lstrcmpiW (lpString1=".xls", lpString2=".CFG") returned 1
	[0055.894] lstrlenW (lpString=".xlsx") returned 5
	[0055.894] lstrcmpiW (lpString1=".xlsx", lpString2="2.CFG") returned -1
	[0055.894] lstrlenW (lpString=".ppt") returned 4
	[0055.894] lstrcmpiW (lpString1=".ppt", lpString2=".CFG") returned 1
	[0055.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67
	[0055.894] lstrlenW (lpString=".zip") returned 4
	[0055.894] lstrcmpiW (lpString1=".zip", lpString2=".CFG") returned 1
	[0055.894] lstrlenW (lpString=".rar") returned 4
	[0055.894] lstrcmpiW (lpString1=".rar", lpString2=".CFG") returned 1
	[0055.894] lstrlenW (lpString=".bz2") returned 4
	[0055.894] lstrcmpiW (lpString1=".bz2", lpString2=".CFG") returned -1
	[0055.894] lstrlenW (lpString=".7z") returned 3
	[0055.894] lstrcmpiW (lpString1=".7z", lpString2="CFG") returned -1
	[0055.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67
	[0055.894] lstrlenW (lpString=".dbf") returned 4
	[0055.894] lstrcmpiW (lpString1=".dbf", lpString2=".CFG") returned 1
	[0055.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67
	[0055.894] lstrlenW (lpString=".1cd") returned 4
	[0055.894] lstrcmpiW (lpString1=".1cd", lpString2=".CFG") returned -1
	[0055.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG") returned 67
	[0055.894] lstrlenW (lpString=".jpg") returned 4
	[0055.895] lstrcmpiW (lpString1=".jpg", lpString2=".CFG") returned 1
	[0055.895] lstrcmpiW (lpString1=".FLT", lpString2=".beets") returned 1
	[0055.895] lstrlenW (lpString="CGMIMP32.FLT") returned 12
	[0055.895] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0055.896] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=323936) returned 1
	[0055.896] CloseHandle (hObject=0x1b8) returned 1
	[0055.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt")) returned 0x20
	[0055.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.896] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0055.896] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.896] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.896] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0055.896] GetLastError () returned 0x0
	[0055.896] ReadFile (in: hFile=0x1b8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x4f160, lpOverlapped=0x0) returned 1
	[0055.904] WriteFile (in: hFile=0x1e4, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x4f170, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x4f170, lpOverlapped=0x0) returned 1
	[0055.910] ReadFile (in: hFile=0x1b8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.910] WriteFile (in: hFile=0x1e4, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0055.910] SetEndOfFile (hFile=0x1e4) returned 1
	[0055.910] CloseHandle (hObject=0x1e4) returned 1
	[0055.911] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.911] SetEndOfFile (hFile=0x1b8) returned 1
	[0055.914] CloseHandle (hObject=0x1b8) returned 1
	[0055.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.914] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt")) returned 1
	[0055.914] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67
	[0055.914] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67
	[0055.914] lstrlenW (lpString=".doc") returned 4
	[0055.914] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0055.914] lstrlenW (lpString=".docx") returned 5
	[0055.915] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0055.915] lstrlenW (lpString=".pdf") returned 4
	[0055.915] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0055.915] lstrlenW (lpString=".xls") returned 4
	[0055.915] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0055.915] lstrlenW (lpString=".xlsx") returned 5
	[0055.915] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0055.915] lstrlenW (lpString=".ppt") returned 4
	[0055.915] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0055.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67
	[0055.915] lstrlenW (lpString=".zip") returned 4
	[0055.915] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0055.915] lstrlenW (lpString=".rar") returned 4
	[0055.915] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0055.915] lstrlenW (lpString=".bz2") returned 4
	[0055.915] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0055.915] lstrlenW (lpString=".7z") returned 3
	[0055.915] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0055.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67
	[0055.915] lstrlenW (lpString=".dbf") returned 4
	[0055.915] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0055.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67
	[0055.915] lstrlenW (lpString=".1cd") returned 4
	[0055.915] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0055.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67
	[0055.915] lstrlenW (lpString=".jpg") returned 4
	[0055.915] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0055.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67
	[0055.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67
	[0055.915] lstrlenW (lpString=".doc") returned 4
	[0055.915] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0055.915] lstrlenW (lpString=".docx") returned 5
	[0055.916] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0055.916] lstrlenW (lpString=".pdf") returned 4
	[0055.916] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0055.916] lstrlenW (lpString=".xls") returned 4
	[0055.916] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0055.916] lstrlenW (lpString=".xlsx") returned 5
	[0055.916] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0055.916] lstrlenW (lpString=".ppt") returned 4
	[0055.916] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0055.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67
	[0055.916] lstrlenW (lpString=".zip") returned 4
	[0055.916] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0055.916] lstrlenW (lpString=".rar") returned 4
	[0055.916] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0055.916] lstrlenW (lpString=".bz2") returned 4
	[0055.916] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0055.916] lstrlenW (lpString=".7z") returned 3
	[0055.916] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0055.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67
	[0055.916] lstrlenW (lpString=".dbf") returned 4
	[0055.916] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0055.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67
	[0055.916] lstrlenW (lpString=".1cd") returned 4
	[0055.916] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0055.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT") returned 67
	[0055.916] lstrlenW (lpString=".jpg") returned 4
	[0055.916] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0055.916] lstrcmpiW (lpString1=".FNT", lpString2=".beets") returned 1
	[0055.917] lstrlenW (lpString="CGMIMP32.FNT") returned 12
	[0055.917] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0056.173] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=606062) returned 1
	[0056.173] CloseHandle (hObject=0x20c) returned 1
	[0056.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt")) returned 0x20
	[0056.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0056.174] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0056.174] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0056.174] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0056.174] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0056.174] GetLastError () returned 0x0
	[0056.174] ReadFile (in: hFile=0x20c, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x93f6e, lpOverlapped=0x0) returned 1
	[0056.189] WriteFile (in: hFile=0x210, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x93f70, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x93f70, lpOverlapped=0x0) returned 1
	[0056.198] ReadFile (in: hFile=0x20c, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0056.198] WriteFile (in: hFile=0x210, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0056.198] SetEndOfFile (hFile=0x210) returned 1
	[0056.199] CloseHandle (hObject=0x210) returned 1
	[0056.199] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0056.199] SetEndOfFile (hFile=0x20c) returned 1
	[0056.204] CloseHandle (hObject=0x20c) returned 1
	[0056.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0056.204] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt")) returned 1
	[0056.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67
	[0056.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67
	[0056.205] lstrlenW (lpString=".doc") returned 4
	[0056.205] lstrcmpiW (lpString1=".doc", lpString2=".FNT") returned -1
	[0056.205] lstrlenW (lpString=".docx") returned 5
	[0056.205] lstrcmpiW (lpString1=".docx", lpString2="2.FNT") returned -1
	[0056.205] lstrlenW (lpString=".pdf") returned 4
	[0056.205] lstrcmpiW (lpString1=".pdf", lpString2=".FNT") returned 1
	[0056.205] lstrlenW (lpString=".xls") returned 4
	[0056.205] lstrcmpiW (lpString1=".xls", lpString2=".FNT") returned 1
	[0056.205] lstrlenW (lpString=".xlsx") returned 5
	[0056.205] lstrcmpiW (lpString1=".xlsx", lpString2="2.FNT") returned -1
	[0056.205] lstrlenW (lpString=".ppt") returned 4
	[0056.205] lstrcmpiW (lpString1=".ppt", lpString2=".FNT") returned 1
	[0056.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67
	[0056.205] lstrlenW (lpString=".zip") returned 4
	[0056.205] lstrcmpiW (lpString1=".zip", lpString2=".FNT") returned 1
	[0056.205] lstrlenW (lpString=".rar") returned 4
	[0056.205] lstrcmpiW (lpString1=".rar", lpString2=".FNT") returned 1
	[0056.205] lstrlenW (lpString=".bz2") returned 4
	[0056.205] lstrcmpiW (lpString1=".bz2", lpString2=".FNT") returned -1
	[0056.205] lstrlenW (lpString=".7z") returned 3
	[0056.205] lstrcmpiW (lpString1=".7z", lpString2="FNT") returned -1
	[0056.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67
	[0056.205] lstrlenW (lpString=".dbf") returned 4
	[0056.205] lstrcmpiW (lpString1=".dbf", lpString2=".FNT") returned -1
	[0056.205] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67
	[0056.205] lstrlenW (lpString=".1cd") returned 4
	[0056.205] lstrcmpiW (lpString1=".1cd", lpString2=".FNT") returned -1
	[0056.206] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67
	[0056.206] lstrlenW (lpString=".jpg") returned 4
	[0056.206] lstrcmpiW (lpString1=".jpg", lpString2=".FNT") returned 1
	[0056.206] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67
	[0056.206] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67
	[0056.206] lstrlenW (lpString=".doc") returned 4
	[0056.206] lstrcmpiW (lpString1=".doc", lpString2=".FNT") returned -1
	[0056.206] lstrlenW (lpString=".docx") returned 5
	[0056.206] lstrcmpiW (lpString1=".docx", lpString2="2.FNT") returned -1
	[0056.206] lstrlenW (lpString=".pdf") returned 4
	[0056.206] lstrcmpiW (lpString1=".pdf", lpString2=".FNT") returned 1
	[0056.206] lstrlenW (lpString=".xls") returned 4
	[0056.206] lstrcmpiW (lpString1=".xls", lpString2=".FNT") returned 1
	[0056.206] lstrlenW (lpString=".xlsx") returned 5
	[0056.206] lstrcmpiW (lpString1=".xlsx", lpString2="2.FNT") returned -1
	[0056.206] lstrlenW (lpString=".ppt") returned 4
	[0056.206] lstrcmpiW (lpString1=".ppt", lpString2=".FNT") returned 1
	[0056.206] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67
	[0056.206] lstrlenW (lpString=".zip") returned 4
	[0056.206] lstrcmpiW (lpString1=".zip", lpString2=".FNT") returned 1
	[0056.206] lstrlenW (lpString=".rar") returned 4
	[0056.206] lstrcmpiW (lpString1=".rar", lpString2=".FNT") returned 1
	[0056.206] lstrlenW (lpString=".bz2") returned 4
	[0056.206] lstrcmpiW (lpString1=".bz2", lpString2=".FNT") returned -1
	[0056.206] lstrlenW (lpString=".7z") returned 3
	[0056.206] lstrcmpiW (lpString1=".7z", lpString2="FNT") returned -1
	[0056.206] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67
	[0056.206] lstrlenW (lpString=".dbf") returned 4
	[0056.206] lstrcmpiW (lpString1=".dbf", lpString2=".FNT") returned -1
	[0056.206] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67
	[0056.206] lstrlenW (lpString=".1cd") returned 4
	[0056.206] lstrcmpiW (lpString1=".1cd", lpString2=".FNT") returned -1
	[0056.207] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT") returned 67
	[0056.207] lstrlenW (lpString=".jpg") returned 4
	[0056.207] lstrcmpiW (lpString1=".jpg", lpString2=".FNT") returned 1
	[0056.207] lstrcmpiW (lpString1=".FLT", lpString2=".beets") returned 1
	[0056.207] lstrlenW (lpString="EPSIMP32.FLT") returned 12
	[0056.207] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0056.207] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=712592) returned 1
	[0056.207] CloseHandle (hObject=0x20c) returned 1
	[0056.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt")) returned 0x20
	[0056.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0056.207] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0056.207] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0056.208] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0056.208] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0056.208] GetLastError () returned 0x0
	[0056.208] ReadFile (in: hFile=0x20c, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0xadf90, lpOverlapped=0x0) returned 1
	[0057.161] WriteFile (in: hFile=0x210, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xadfa0, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xadfa0, lpOverlapped=0x0) returned 1
	[0057.174] ReadFile (in: hFile=0x20c, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.174] WriteFile (in: hFile=0x210, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.174] SetEndOfFile (hFile=0x210) returned 1
	[0057.174] CloseHandle (hObject=0x210) returned 1
	[0057.175] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.175] SetEndOfFile (hFile=0x20c) returned 1
	[0057.180] CloseHandle (hObject=0x20c) returned 1
	[0057.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.181] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt")) returned 1
	[0057.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67
	[0057.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67
	[0057.475] lstrlenW (lpString=".doc") returned 4
	[0057.475] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0057.475] lstrlenW (lpString=".docx") returned 5
	[0057.475] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0057.475] lstrlenW (lpString=".pdf") returned 4
	[0057.475] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0057.475] lstrlenW (lpString=".xls") returned 4
	[0057.475] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0057.475] lstrlenW (lpString=".xlsx") returned 5
	[0057.475] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0057.475] lstrlenW (lpString=".ppt") returned 4
	[0057.475] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0057.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67
	[0057.475] lstrlenW (lpString=".zip") returned 4
	[0057.475] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0057.475] lstrlenW (lpString=".rar") returned 4
	[0057.475] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0057.475] lstrlenW (lpString=".bz2") returned 4
	[0057.475] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0057.475] lstrlenW (lpString=".7z") returned 3
	[0057.475] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0057.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67
	[0057.475] lstrlenW (lpString=".dbf") returned 4
	[0057.475] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0057.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67
	[0057.475] lstrlenW (lpString=".1cd") returned 4
	[0057.475] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0057.475] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67
	[0057.475] lstrlenW (lpString=".jpg") returned 4
	[0057.475] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0057.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67
	[0057.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67
	[0057.476] lstrlenW (lpString=".doc") returned 4
	[0057.476] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0057.476] lstrlenW (lpString=".docx") returned 5
	[0057.476] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0057.476] lstrlenW (lpString=".pdf") returned 4
	[0057.476] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0057.476] lstrlenW (lpString=".xls") returned 4
	[0057.476] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0057.476] lstrlenW (lpString=".xlsx") returned 5
	[0057.476] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0057.476] lstrlenW (lpString=".ppt") returned 4
	[0057.476] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0057.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67
	[0057.476] lstrlenW (lpString=".zip") returned 4
	[0057.476] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0057.476] lstrlenW (lpString=".rar") returned 4
	[0057.476] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0057.476] lstrlenW (lpString=".bz2") returned 4
	[0057.476] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0057.476] lstrlenW (lpString=".7z") returned 3
	[0057.476] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0057.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67
	[0057.476] lstrlenW (lpString=".dbf") returned 4
	[0057.476] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0057.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67
	[0057.476] lstrlenW (lpString=".1cd") returned 4
	[0057.476] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0057.476] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT") returned 67
	[0057.476] lstrlenW (lpString=".jpg") returned 4
	[0057.476] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0057.477] lstrcmpiW (lpString1=".FLT", lpString2=".beets") returned 1
	[0057.477] lstrlenW (lpString="PNG32.FLT") returned 9
	[0057.477] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0057.492] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=302976) returned 1
	[0057.492] CloseHandle (hObject=0x1ec) returned 1
	[0057.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt")) returned 0x20
	[0057.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0057.492] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec
	[0057.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.492] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0057.493] GetLastError () returned 0x0
	[0057.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x49f80, lpOverlapped=0x0) returned 1
	[0057.578] WriteFile (in: hFile=0x22c, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x49f90, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x49f90, lpOverlapped=0x0) returned 1
	[0057.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.584] WriteFile (in: hFile=0x22c, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0057.584] SetEndOfFile (hFile=0x22c) returned 1
	[0057.584] CloseHandle (hObject=0x22c) returned 1
	[0057.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.584] SetEndOfFile (hFile=0x1ec) returned 1
	[0057.588] CloseHandle (hObject=0x1ec) returned 1
	[0057.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.588] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt")) returned 1
	[0057.588] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64
	[0057.588] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64
	[0057.588] lstrlenW (lpString=".doc") returned 4
	[0057.588] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0057.588] lstrlenW (lpString=".docx") returned 5
	[0057.588] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0057.588] lstrlenW (lpString=".pdf") returned 4
	[0057.588] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0057.588] lstrlenW (lpString=".xls") returned 4
	[0057.588] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0057.588] lstrlenW (lpString=".xlsx") returned 5
	[0057.588] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0057.588] lstrlenW (lpString=".ppt") returned 4
	[0057.589] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0057.589] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64
	[0057.589] lstrlenW (lpString=".zip") returned 4
	[0057.589] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0057.589] lstrlenW (lpString=".rar") returned 4
	[0057.589] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0057.589] lstrlenW (lpString=".bz2") returned 4
	[0057.589] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0057.589] lstrlenW (lpString=".7z") returned 3
	[0057.589] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0057.589] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64
	[0057.589] lstrlenW (lpString=".dbf") returned 4
	[0057.589] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0057.589] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64
	[0057.589] lstrlenW (lpString=".1cd") returned 4
	[0057.589] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0057.589] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64
	[0057.589] lstrlenW (lpString=".jpg") returned 4
	[0057.589] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0057.589] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64
	[0057.589] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64
	[0057.589] lstrlenW (lpString=".doc") returned 4
	[0057.589] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0057.589] lstrlenW (lpString=".docx") returned 5
	[0057.589] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0057.589] lstrlenW (lpString=".pdf") returned 4
	[0057.589] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0057.589] lstrlenW (lpString=".xls") returned 4
	[0057.589] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0057.589] lstrlenW (lpString=".xlsx") returned 5
	[0057.589] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0057.589] lstrlenW (lpString=".ppt") returned 4
	[0057.590] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0057.590] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64
	[0057.590] lstrlenW (lpString=".zip") returned 4
	[0057.590] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0057.590] lstrlenW (lpString=".rar") returned 4
	[0057.590] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0057.590] lstrlenW (lpString=".bz2") returned 4
	[0057.590] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0057.590] lstrlenW (lpString=".7z") returned 3
	[0057.590] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0057.590] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64
	[0057.590] lstrlenW (lpString=".dbf") returned 4
	[0057.590] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0057.590] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64
	[0057.590] lstrlenW (lpString=".1cd") returned 4
	[0057.590] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0057.590] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT") returned 64
	[0057.590] lstrlenW (lpString=".jpg") returned 4
	[0057.590] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0057.590] lstrcmpiW (lpString1=".FLT", lpString2=".beets") returned 1
	[0057.590] lstrlenW (lpString="WPGIMP32.FLT") returned 12
	[0057.590] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0057.787] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=280448) returned 1
	[0057.787] CloseHandle (hObject=0x1e4) returned 1
	[0057.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt")) returned 0x20
	[0057.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0057.787] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0057.787] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.787] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.787] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c
	[0057.788] GetLastError () returned 0x0
	[0057.788] ReadFile (in: hFile=0x1e4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x44780, lpOverlapped=0x0) returned 1
	[0057.795] WriteFile (in: hFile=0x16c, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x44790, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x44790, lpOverlapped=0x0) returned 1
	[0057.800] ReadFile (in: hFile=0x1e4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.800] WriteFile (in: hFile=0x16c, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.800] SetEndOfFile (hFile=0x16c) returned 1
	[0057.800] CloseHandle (hObject=0x16c) returned 1
	[0057.800] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.801] SetEndOfFile (hFile=0x1e4) returned 1
	[0057.803] CloseHandle (hObject=0x1e4) returned 1
	[0057.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.804] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt")) returned 1
	[0057.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67
	[0057.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67
	[0057.804] lstrlenW (lpString=".doc") returned 4
	[0057.804] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0057.804] lstrlenW (lpString=".docx") returned 5
	[0057.804] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0057.804] lstrlenW (lpString=".pdf") returned 4
	[0057.804] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0057.804] lstrlenW (lpString=".xls") returned 4
	[0057.804] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0057.804] lstrlenW (lpString=".xlsx") returned 5
	[0057.804] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0057.804] lstrlenW (lpString=".ppt") returned 4
	[0057.804] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0057.804] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67
	[0057.804] lstrlenW (lpString=".zip") returned 4
	[0057.804] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0057.804] lstrlenW (lpString=".rar") returned 4
	[0057.804] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0057.805] lstrlenW (lpString=".bz2") returned 4
	[0057.805] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0057.805] lstrlenW (lpString=".7z") returned 3
	[0057.805] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0057.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67
	[0057.805] lstrlenW (lpString=".dbf") returned 4
	[0057.805] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0057.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67
	[0057.805] lstrlenW (lpString=".1cd") returned 4
	[0057.805] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0057.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67
	[0057.805] lstrlenW (lpString=".jpg") returned 4
	[0057.805] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0057.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67
	[0057.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67
	[0057.805] lstrlenW (lpString=".doc") returned 4
	[0057.805] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0057.805] lstrlenW (lpString=".docx") returned 5
	[0057.805] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0057.805] lstrlenW (lpString=".pdf") returned 4
	[0057.805] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0057.805] lstrlenW (lpString=".xls") returned 4
	[0057.805] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0057.805] lstrlenW (lpString=".xlsx") returned 5
	[0057.805] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0057.805] lstrlenW (lpString=".ppt") returned 4
	[0057.805] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0057.805] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67
	[0057.805] lstrlenW (lpString=".zip") returned 4
	[0057.805] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0058.650] lstrlenW (lpString=".rar") returned 4
	[0058.650] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0058.650] lstrlenW (lpString=".bz2") returned 4
	[0058.650] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0058.650] lstrlenW (lpString=".7z") returned 3
	[0058.650] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0058.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67
	[0058.650] lstrlenW (lpString=".dbf") returned 4
	[0058.650] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0058.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67
	[0058.650] lstrlenW (lpString=".1cd") returned 4
	[0058.650] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0058.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT") returned 67
	[0058.650] lstrlenW (lpString=".jpg") returned 4
	[0058.650] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0058.650] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0058.650] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0058.650] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0058.857] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=3584) returned 1
	[0058.857] CloseHandle (hObject=0x1e4) returned 1
	[0058.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20
	[0058.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.858] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0058.858] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0058.858] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0058.858] lstrlenW (lpString=".doc") returned 4
	[0058.858] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0058.858] lstrlenW (lpString=".docx") returned 5
	[0058.858] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0058.858] lstrlenW (lpString=".pdf") returned 4
	[0058.858] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0058.858] lstrlenW (lpString=".xls") returned 4
	[0058.858] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0058.858] lstrlenW (lpString=".xlsx") returned 5
	[0058.858] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0058.858] lstrlenW (lpString=".ppt") returned 4
	[0058.858] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0058.858] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0058.858] lstrlenW (lpString=".zip") returned 4
	[0058.858] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0058.858] lstrlenW (lpString=".rar") returned 4
	[0058.858] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0058.858] lstrlenW (lpString=".bz2") returned 4
	[0058.858] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0058.858] lstrlenW (lpString=".7z") returned 3
	[0058.858] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0058.859] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0058.859] lstrlenW (lpString=".dbf") returned 4
	[0058.859] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0058.859] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0058.859] lstrlenW (lpString=".1cd") returned 4
	[0058.859] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0058.859] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0058.859] lstrlenW (lpString=".jpg") returned 4
	[0058.859] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0058.859] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0058.859] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0058.859] lstrlenW (lpString=".doc") returned 4
	[0058.859] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0058.859] lstrlenW (lpString=".docx") returned 5
	[0058.859] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0058.859] lstrlenW (lpString=".pdf") returned 4
	[0058.859] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0058.859] lstrlenW (lpString=".xls") returned 4
	[0058.859] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0058.859] lstrlenW (lpString=".xlsx") returned 5
	[0058.859] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0058.859] lstrlenW (lpString=".ppt") returned 4
	[0058.859] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0058.859] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0058.859] lstrlenW (lpString=".zip") returned 4
	[0058.859] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0058.859] lstrlenW (lpString=".rar") returned 4
	[0058.859] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0058.859] lstrlenW (lpString=".bz2") returned 4
	[0058.859] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0058.859] lstrlenW (lpString=".7z") returned 3
	[0058.859] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0058.860] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0058.860] lstrlenW (lpString=".dbf") returned 4
	[0058.860] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0058.860] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0058.860] lstrlenW (lpString=".1cd") returned 4
	[0058.860] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0058.860] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0058.860] lstrlenW (lpString=".jpg") returned 4
	[0058.860] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0058.860] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0058.860] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0058.860] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0058.862] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=4096) returned 1
	[0058.862] CloseHandle (hObject=0x1e4) returned 1
	[0058.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20
	[0058.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.862] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0058.862] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0058.862] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0058.862] lstrlenW (lpString=".doc") returned 4
	[0058.862] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0058.862] lstrlenW (lpString=".docx") returned 5
	[0058.862] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0058.862] lstrlenW (lpString=".pdf") returned 4
	[0058.862] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0058.862] lstrlenW (lpString=".xls") returned 4
	[0058.862] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0058.862] lstrlenW (lpString=".xlsx") returned 5
	[0058.862] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0058.862] lstrlenW (lpString=".ppt") returned 4
	[0058.862] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0058.862] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0058.862] lstrlenW (lpString=".zip") returned 4
	[0058.862] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0058.862] lstrlenW (lpString=".rar") returned 4
	[0058.862] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0058.863] lstrlenW (lpString=".bz2") returned 4
	[0058.863] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0058.863] lstrlenW (lpString=".7z") returned 3
	[0058.863] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0058.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0058.863] lstrlenW (lpString=".dbf") returned 4
	[0058.863] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0058.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0058.863] lstrlenW (lpString=".1cd") returned 4
	[0058.863] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0058.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0058.863] lstrlenW (lpString=".jpg") returned 4
	[0058.863] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0058.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0058.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0058.863] lstrlenW (lpString=".doc") returned 4
	[0058.863] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0058.863] lstrlenW (lpString=".docx") returned 5
	[0058.863] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0058.863] lstrlenW (lpString=".pdf") returned 4
	[0058.863] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0058.863] lstrlenW (lpString=".xls") returned 4
	[0058.863] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0058.863] lstrlenW (lpString=".xlsx") returned 5
	[0058.863] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0058.863] lstrlenW (lpString=".ppt") returned 4
	[0058.863] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0058.863] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0058.863] lstrlenW (lpString=".zip") returned 4
	[0058.863] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0058.863] lstrlenW (lpString=".rar") returned 4
	[0058.864] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0058.864] lstrlenW (lpString=".bz2") returned 4
	[0058.864] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0058.864] lstrlenW (lpString=".7z") returned 3
	[0058.864] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0058.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0058.864] lstrlenW (lpString=".dbf") returned 4
	[0058.864] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0058.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0058.864] lstrlenW (lpString=".1cd") returned 4
	[0058.864] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0058.864] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0058.864] lstrlenW (lpString=".jpg") returned 4
	[0058.864] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0058.864] lstrcmpiW (lpString1=".exe", lpString2=".beets") returned 1
	[0058.864] lstrlenW (lpString="ConvertInkStore.exe") returned 19
	[0058.864] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0058.865] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=193024) returned 1
	[0058.865] CloseHandle (hObject=0x1e4) returned 1
	[0058.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe")) returned 0x20
	[0058.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.865] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0058.865] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0058.865] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0058.865] lstrlenW (lpString=".doc") returned 4
	[0058.865] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0058.865] lstrlenW (lpString=".docx") returned 5
	[0058.865] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0058.865] lstrlenW (lpString=".pdf") returned 4
	[0058.865] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0058.865] lstrlenW (lpString=".xls") returned 4
	[0058.865] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0058.865] lstrlenW (lpString=".xlsx") returned 5
	[0058.865] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0058.865] lstrlenW (lpString=".ppt") returned 4
	[0058.865] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0058.865] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0058.865] lstrlenW (lpString=".zip") returned 4
	[0058.865] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0058.865] lstrlenW (lpString=".rar") returned 4
	[0058.865] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0058.865] lstrlenW (lpString=".bz2") returned 4
	[0058.865] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0058.865] lstrlenW (lpString=".7z") returned 3
	[0058.866] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0058.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0058.866] lstrlenW (lpString=".dbf") returned 4
	[0058.866] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0058.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0058.866] lstrlenW (lpString=".1cd") returned 4
	[0058.866] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0058.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0058.866] lstrlenW (lpString=".jpg") returned 4
	[0058.866] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0058.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0058.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0058.866] lstrlenW (lpString=".doc") returned 4
	[0058.866] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0058.866] lstrlenW (lpString=".docx") returned 5
	[0058.866] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0058.866] lstrlenW (lpString=".pdf") returned 4
	[0058.866] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0058.866] lstrlenW (lpString=".xls") returned 4
	[0058.866] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0058.866] lstrlenW (lpString=".xlsx") returned 5
	[0058.866] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0058.866] lstrlenW (lpString=".ppt") returned 4
	[0058.866] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0058.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0058.867] lstrlenW (lpString=".zip") returned 4
	[0058.867] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0058.867] lstrlenW (lpString=".rar") returned 4
	[0058.867] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0058.867] lstrlenW (lpString=".bz2") returned 4
	[0058.867] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0058.867] lstrlenW (lpString=".7z") returned 3
	[0058.867] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0058.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0058.867] lstrlenW (lpString=".dbf") returned 4
	[0058.867] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0058.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0058.867] lstrlenW (lpString=".1cd") returned 4
	[0058.867] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0058.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe") returned 70
	[0058.867] lstrlenW (lpString=".jpg") returned 4
	[0058.867] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0058.868] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0058.868] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0058.868] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0058.868] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=3584) returned 1
	[0058.868] CloseHandle (hObject=0x1e4) returned 1
	[0058.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20
	[0058.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.868] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0058.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0058.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0058.869] lstrlenW (lpString=".doc") returned 4
	[0058.869] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0058.869] lstrlenW (lpString=".docx") returned 5
	[0058.869] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0058.869] lstrlenW (lpString=".pdf") returned 4
	[0058.869] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0058.869] lstrlenW (lpString=".xls") returned 4
	[0058.869] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0058.869] lstrlenW (lpString=".xlsx") returned 5
	[0058.869] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0058.869] lstrlenW (lpString=".ppt") returned 4
	[0058.869] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0058.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0058.869] lstrlenW (lpString=".zip") returned 4
	[0058.869] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0058.869] lstrlenW (lpString=".rar") returned 4
	[0058.869] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0058.869] lstrlenW (lpString=".bz2") returned 4
	[0058.869] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0058.869] lstrlenW (lpString=".7z") returned 3
	[0058.869] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0058.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0058.869] lstrlenW (lpString=".dbf") returned 4
	[0058.869] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0058.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0058.869] lstrlenW (lpString=".1cd") returned 4
	[0058.869] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0058.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0058.869] lstrlenW (lpString=".jpg") returned 4
	[0058.869] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0058.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0058.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0058.870] lstrlenW (lpString=".doc") returned 4
	[0058.870] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0058.870] lstrlenW (lpString=".docx") returned 5
	[0058.870] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0058.870] lstrlenW (lpString=".pdf") returned 4
	[0058.870] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0058.870] lstrlenW (lpString=".xls") returned 4
	[0058.870] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0058.870] lstrlenW (lpString=".xlsx") returned 5
	[0058.870] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0058.870] lstrlenW (lpString=".ppt") returned 4
	[0058.870] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0058.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0058.870] lstrlenW (lpString=".zip") returned 4
	[0058.870] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0058.870] lstrlenW (lpString=".rar") returned 4
	[0058.870] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0058.870] lstrlenW (lpString=".bz2") returned 4
	[0058.870] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0058.870] lstrlenW (lpString=".7z") returned 3
	[0058.870] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0058.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0058.870] lstrlenW (lpString=".dbf") returned 4
	[0058.870] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0058.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0058.870] lstrlenW (lpString=".1cd") returned 4
	[0058.870] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0058.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0058.870] lstrlenW (lpString=".jpg") returned 4
	[0058.870] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0058.871] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0058.871] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0058.871] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0058.871] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=3584) returned 1
	[0058.871] CloseHandle (hObject=0x1e4) returned 1
	[0058.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20
	[0058.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.871] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0058.871] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0058.871] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0058.871] lstrlenW (lpString=".doc") returned 4
	[0058.871] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0058.871] lstrlenW (lpString=".docx") returned 5
	[0058.872] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0058.872] lstrlenW (lpString=".pdf") returned 4
	[0058.872] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0058.872] lstrlenW (lpString=".xls") returned 4
	[0058.872] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0058.872] lstrlenW (lpString=".xlsx") returned 5
	[0058.872] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0058.872] lstrlenW (lpString=".ppt") returned 4
	[0058.872] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0058.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0058.872] lstrlenW (lpString=".zip") returned 4
	[0058.872] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0058.872] lstrlenW (lpString=".rar") returned 4
	[0058.872] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0058.872] lstrlenW (lpString=".bz2") returned 4
	[0058.872] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0058.872] lstrlenW (lpString=".7z") returned 3
	[0058.872] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0058.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0058.872] lstrlenW (lpString=".dbf") returned 4
	[0058.872] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0058.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0058.872] lstrlenW (lpString=".1cd") returned 4
	[0058.872] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0058.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0058.872] lstrlenW (lpString=".jpg") returned 4
	[0058.872] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0058.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0058.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0058.872] lstrlenW (lpString=".doc") returned 4
	[0058.872] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0058.872] lstrlenW (lpString=".docx") returned 5
	[0058.873] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0058.873] lstrlenW (lpString=".pdf") returned 4
	[0058.873] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0058.873] lstrlenW (lpString=".xls") returned 4
	[0058.873] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0058.873] lstrlenW (lpString=".xlsx") returned 5
	[0058.873] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0058.873] lstrlenW (lpString=".ppt") returned 4
	[0058.873] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0058.873] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0058.873] lstrlenW (lpString=".zip") returned 4
	[0058.873] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0058.873] lstrlenW (lpString=".rar") returned 4
	[0058.873] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0058.873] lstrlenW (lpString=".bz2") returned 4
	[0058.873] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0058.873] lstrlenW (lpString=".7z") returned 3
	[0058.873] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0058.873] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0058.873] lstrlenW (lpString=".dbf") returned 4
	[0058.873] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0058.873] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0058.873] lstrlenW (lpString=".1cd") returned 4
	[0058.873] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0058.873] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0058.873] lstrlenW (lpString=".jpg") returned 4
	[0058.873] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0058.873] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0058.873] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0058.873] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c
	[0058.994] GetFileSizeEx (in: hFile=0x16c, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=4096) returned 1
	[0058.994] CloseHandle (hObject=0x16c) returned 1
	[0058.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20
	[0058.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.994] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0058.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0058.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0058.995] lstrlenW (lpString=".doc") returned 4
	[0058.995] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0058.995] lstrlenW (lpString=".docx") returned 5
	[0058.995] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0058.995] lstrlenW (lpString=".pdf") returned 4
	[0058.995] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0058.995] lstrlenW (lpString=".xls") returned 4
	[0058.995] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0058.995] lstrlenW (lpString=".xlsx") returned 5
	[0058.995] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0058.995] lstrlenW (lpString=".ppt") returned 4
	[0058.995] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0058.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0058.995] lstrlenW (lpString=".zip") returned 4
	[0058.995] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0058.995] lstrlenW (lpString=".rar") returned 4
	[0058.995] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0058.995] lstrlenW (lpString=".bz2") returned 4
	[0058.995] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0058.995] lstrlenW (lpString=".7z") returned 3
	[0058.995] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0058.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0058.995] lstrlenW (lpString=".dbf") returned 4
	[0058.995] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0058.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0058.995] lstrlenW (lpString=".1cd") returned 4
	[0058.995] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0058.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0058.995] lstrlenW (lpString=".jpg") returned 4
	[0058.996] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0058.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0058.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0058.996] lstrlenW (lpString=".doc") returned 4
	[0058.996] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0058.996] lstrlenW (lpString=".docx") returned 5
	[0058.996] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0058.996] lstrlenW (lpString=".pdf") returned 4
	[0058.996] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0058.996] lstrlenW (lpString=".xls") returned 4
	[0058.996] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0058.996] lstrlenW (lpString=".xlsx") returned 5
	[0058.996] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0058.996] lstrlenW (lpString=".ppt") returned 4
	[0058.996] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0058.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0058.996] lstrlenW (lpString=".zip") returned 4
	[0058.996] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0058.996] lstrlenW (lpString=".rar") returned 4
	[0058.996] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0058.996] lstrlenW (lpString=".bz2") returned 4
	[0058.996] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0058.996] lstrlenW (lpString=".7z") returned 3
	[0058.996] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0058.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0058.996] lstrlenW (lpString=".dbf") returned 4
	[0058.996] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0058.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0058.996] lstrlenW (lpString=".1cd") returned 4
	[0058.996] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0058.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0058.996] lstrlenW (lpString=".jpg") returned 4
	[0058.996] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0058.997] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0058.997] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0058.997] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c
	[0058.997] GetFileSizeEx (in: hFile=0x16c, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=4096) returned 1
	[0058.997] CloseHandle (hObject=0x16c) returned 1
	[0058.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20
	[0058.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0058.998] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0058.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0058.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0058.998] lstrlenW (lpString=".doc") returned 4
	[0058.998] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0058.998] lstrlenW (lpString=".docx") returned 5
	[0058.998] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0058.998] lstrlenW (lpString=".pdf") returned 4
	[0058.998] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0058.998] lstrlenW (lpString=".xls") returned 4
	[0058.998] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0058.998] lstrlenW (lpString=".xlsx") returned 5
	[0058.998] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0058.998] lstrlenW (lpString=".ppt") returned 4
	[0058.998] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0058.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0058.998] lstrlenW (lpString=".zip") returned 4
	[0058.998] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0058.998] lstrlenW (lpString=".rar") returned 4
	[0058.998] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0058.998] lstrlenW (lpString=".bz2") returned 4
	[0058.998] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0058.999] lstrlenW (lpString=".7z") returned 3
	[0058.999] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0058.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0058.999] lstrlenW (lpString=".dbf") returned 4
	[0058.999] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.205] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0059.212] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0059.214] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0
	[0059.557] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.557] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.557] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0059.557] GetLastError () returned 0x0
	[0059.557] ReadFile (in: hFile=0x238, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x305a8, lpOverlapped=0x0) returned 1
	[0059.566] WriteFile (in: hFile=0x1d8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x305b0, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x305b0, lpOverlapped=0x0) returned 1
	[0059.570] ReadFile (in: hFile=0x238, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0059.570] WriteFile (in: hFile=0x1d8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0059.570] SetEndOfFile (hFile=0x1d8) returned 1
	[0059.570] CloseHandle (hObject=0x1d8) returned 1
	[0059.570] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.570] SetEndOfFile (hFile=0x238) returned 1
	[0059.572] CloseHandle (hObject=0x238) returned 1
	[0059.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0059.573] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll")) returned 1
	[0059.573] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL") returned 72
	[0059.573] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL") returned 72
	[0059.573] lstrlenW (lpString=".doc") returned 4
	[0059.573] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0059.573] lstrlenW (lpString=".docx") returned 5
	[0059.573] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1
	[0059.573] lstrlenW (lpString=".pdf") returned 4
	[0059.573] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0059.573] lstrlenW (lpString=".xls") returned 4
	[0059.573] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0059.573] lstrlenW (lpString=".xlsx") returned 5
	[0059.573] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1
	[0059.573] lstrlenW (lpString=".ppt") returned 4
	[0059.573] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0059.573] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL") returned 72
	[0059.573] lstrlenW (lpString=".zip") returned 4
	[0059.573] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0059.573] lstrlenW (lpString=".rar") returned 4
	[0059.573] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0059.574] lstrlenW (lpString=".bz2") returned 4
	[0059.574] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0059.574] lstrlenW (lpString=".7z") returned 3
	[0059.574] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL") returned 72
	[0059.574] lstrlenW (lpString=".dbf") returned 4
	[0059.574] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0059.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL") returned 72
	[0059.574] lstrlenW (lpString=".1cd") returned 4
	[0059.574] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0059.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL") returned 72
	[0059.574] lstrlenW (lpString=".jpg") returned 4
	[0059.574] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0059.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL") returned 72
	[0059.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL") returned 72
	[0059.574] lstrlenW (lpString=".doc") returned 4
	[0059.574] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0059.574] lstrlenW (lpString=".docx") returned 5
	[0059.574] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1
	[0059.574] lstrlenW (lpString=".pdf") returned 4
	[0059.574] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0059.574] lstrlenW (lpString=".xls") returned 4
	[0059.574] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0059.574] lstrlenW (lpString=".xlsx") returned 5
	[0059.574] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1
	[0059.574] lstrlenW (lpString=".ppt") returned 4
	[0059.574] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0059.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL") returned 72
	[0059.574] lstrlenW (lpString=".zip") returned 4
	[0059.574] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0059.574] lstrlenW (lpString=".rar") returned 4
	[0059.575] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0059.575] lstrlenW (lpString=".bz2") returned 4
	[0059.575] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0059.575] lstrlenW (lpString=".7z") returned 3
	[0059.575] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.575] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL") returned 72
	[0059.575] lstrlenW (lpString=".dbf") returned 4
	[0059.575] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0059.575] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL") returned 72
	[0059.575] lstrlenW (lpString=".1cd") returned 4
	[0059.575] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0059.575] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL") returned 72
	[0059.575] lstrlenW (lpString=".jpg") returned 4
	[0059.575] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0059.575] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0059.575] lstrlenW (lpString="ACEWSTR.DLL") returned 11
	[0059.575] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0059.576] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=862608) returned 1
	[0059.576] CloseHandle (hObject=0x238) returned 1
	[0059.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll")) returned 0x20
	[0059.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.576] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0059.576] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.576] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.576] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0059.577] GetLastError () returned 0x0
	[0059.577] ReadFile (in: hFile=0x238, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0xd2990, lpOverlapped=0x0) returned 1
	[0059.613] WriteFile (in: hFile=0x1d8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xd29a0, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xd29a0, lpOverlapped=0x0) returned 1
	[0060.438] ReadFile (in: hFile=0x238, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.438] WriteFile (in: hFile=0x1d8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xea, lpOverlapped=0x0) returned 1
	[0060.439] SetEndOfFile (hFile=0x1d8) returned 1
	[0060.439] CloseHandle (hObject=0x1d8) returned 1
	[0060.439] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.439] SetEndOfFile (hFile=0x238) returned 1
	[0060.446] CloseHandle (hObject=0x238) returned 1
	[0060.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.447] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll")) returned 1
	[0060.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL") returned 72
	[0060.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL") returned 72
	[0060.529] lstrlenW (lpString=".doc") returned 4
	[0060.529] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.529] lstrlenW (lpString=".docx") returned 5
	[0060.529] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1
	[0060.529] lstrlenW (lpString=".pdf") returned 4
	[0060.529] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.529] lstrlenW (lpString=".xls") returned 4
	[0060.529] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.529] lstrlenW (lpString=".xlsx") returned 5
	[0060.529] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1
	[0060.529] lstrlenW (lpString=".ppt") returned 4
	[0060.529] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL") returned 72
	[0060.529] lstrlenW (lpString=".zip") returned 4
	[0060.529] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.529] lstrlenW (lpString=".rar") returned 4
	[0060.529] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.529] lstrlenW (lpString=".bz2") returned 4
	[0060.529] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.529] lstrlenW (lpString=".7z") returned 3
	[0060.529] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL") returned 72
	[0060.529] lstrlenW (lpString=".dbf") returned 4
	[0060.529] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL") returned 72
	[0060.529] lstrlenW (lpString=".1cd") returned 4
	[0060.529] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL") returned 72
	[0060.529] lstrlenW (lpString=".jpg") returned 4
	[0060.529] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL") returned 72
	[0060.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL") returned 72
	[0060.530] lstrlenW (lpString=".doc") returned 4
	[0060.530] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.530] lstrlenW (lpString=".docx") returned 5
	[0060.530] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1
	[0060.530] lstrlenW (lpString=".pdf") returned 4
	[0060.530] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.530] lstrlenW (lpString=".xls") returned 4
	[0060.530] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.530] lstrlenW (lpString=".xlsx") returned 5
	[0060.530] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1
	[0060.530] lstrlenW (lpString=".ppt") returned 4
	[0060.530] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL") returned 72
	[0060.530] lstrlenW (lpString=".zip") returned 4
	[0060.530] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.530] lstrlenW (lpString=".rar") returned 4
	[0060.530] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.530] lstrlenW (lpString=".bz2") returned 4
	[0060.530] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.530] lstrlenW (lpString=".7z") returned 3
	[0060.530] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL") returned 72
	[0060.530] lstrlenW (lpString=".dbf") returned 4
	[0060.530] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL") returned 72
	[0060.530] lstrlenW (lpString=".1cd") returned 4
	[0060.530] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL") returned 72
	[0060.530] lstrlenW (lpString=".jpg") returned 4
	[0060.530] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.531] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0060.531] lstrlenW (lpString="OARPMANR.DLL") returned 12
	[0060.531] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0060.531] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=11656) returned 1
	[0060.531] CloseHandle (hObject=0x238) returned 1
	[0060.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll")) returned 0x20
	[0060.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0060.532] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0060.532] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.532] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.532] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0060.532] GetLastError () returned 0x0
	[0060.532] ReadFile (in: hFile=0x238, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x2d88, lpOverlapped=0x0) returned 1
	[0060.534] WriteFile (in: hFile=0x1d8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x2d90, lpOverlapped=0x0) returned 1
	[0060.536] ReadFile (in: hFile=0x238, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.536] WriteFile (in: hFile=0x1d8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xec, lpOverlapped=0x0) returned 1
	[0060.536] SetEndOfFile (hFile=0x1d8) returned 1
	[0060.536] CloseHandle (hObject=0x1d8) returned 1
	[0060.536] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.536] SetEndOfFile (hFile=0x238) returned 1
	[0060.537] CloseHandle (hObject=0x238) returned 1
	[0060.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.537] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll")) returned 1
	[0060.538] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL") returned 73
	[0060.538] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL") returned 73
	[0060.538] lstrlenW (lpString=".doc") returned 4
	[0060.538] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.538] lstrlenW (lpString=".docx") returned 5
	[0060.538] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1
	[0060.538] lstrlenW (lpString=".pdf") returned 4
	[0060.538] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.538] lstrlenW (lpString=".xls") returned 4
	[0060.538] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.538] lstrlenW (lpString=".xlsx") returned 5
	[0060.538] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1
	[0060.538] lstrlenW (lpString=".ppt") returned 4
	[0060.538] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.538] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL") returned 73
	[0060.538] lstrlenW (lpString=".zip") returned 4
	[0060.538] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.538] lstrlenW (lpString=".rar") returned 4
	[0060.538] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.538] lstrlenW (lpString=".bz2") returned 4
	[0060.538] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.538] lstrlenW (lpString=".7z") returned 3
	[0060.538] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.538] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL") returned 73
	[0060.538] lstrlenW (lpString=".dbf") returned 4
	[0060.538] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.538] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL") returned 73
	[0060.538] lstrlenW (lpString=".1cd") returned 4
	[0060.538] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.538] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL") returned 73
	[0060.538] lstrlenW (lpString=".jpg") returned 4
	[0060.538] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.539] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL") returned 73
	[0060.539] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL") returned 73
	[0060.539] lstrlenW (lpString=".doc") returned 4
	[0060.539] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.539] lstrlenW (lpString=".docx") returned 5
	[0060.539] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1
	[0060.539] lstrlenW (lpString=".pdf") returned 4
	[0060.539] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.539] lstrlenW (lpString=".xls") returned 4
	[0060.539] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.539] lstrlenW (lpString=".xlsx") returned 5
	[0060.539] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1
	[0060.539] lstrlenW (lpString=".ppt") returned 4
	[0060.539] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.539] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL") returned 73
	[0060.539] lstrlenW (lpString=".zip") returned 4
	[0060.539] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.539] lstrlenW (lpString=".rar") returned 4
	[0060.539] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.539] lstrlenW (lpString=".bz2") returned 4
	[0060.539] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.539] lstrlenW (lpString=".7z") returned 3
	[0060.539] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.539] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL") returned 73
	[0060.539] lstrlenW (lpString=".dbf") returned 4
	[0060.539] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.539] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL") returned 73
	[0060.539] lstrlenW (lpString=".1cd") returned 4
	[0060.539] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.539] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL") returned 73
	[0060.539] lstrlenW (lpString=".jpg") returned 4
	[0060.539] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.540] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0060.540] lstrlenW (lpString="xlsrvintl.dll") returned 13
	[0060.540] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0060.541] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=105344) returned 1
	[0060.541] CloseHandle (hObject=0x1d8) returned 1
	[0060.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll")) returned 0x20
	[0060.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0060.541] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0060.541] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.541] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.541] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0060.675] GetLastError () returned 0x0
	[0060.675] ReadFile (in: hFile=0x1d8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x19b80, lpOverlapped=0x0) returned 1
	[0060.680] WriteFile (in: hFile=0x1b8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x19b90, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x19b90, lpOverlapped=0x0) returned 1
	[0060.682] ReadFile (in: hFile=0x1d8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.682] WriteFile (in: hFile=0x1b8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xee, lpOverlapped=0x0) returned 1
	[0060.682] SetEndOfFile (hFile=0x1b8) returned 1
	[0060.682] CloseHandle (hObject=0x1b8) returned 1
	[0060.682] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.682] SetEndOfFile (hFile=0x1d8) returned 1
	[0060.684] CloseHandle (hObject=0x1d8) returned 1
	[0060.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.684] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll")) returned 1
	[0060.684] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll") returned 74
	[0060.684] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll") returned 74
	[0060.684] lstrlenW (lpString=".doc") returned 4
	[0060.684] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0060.684] lstrlenW (lpString=".docx") returned 5
	[0060.684] lstrcmpiW (lpString1=".docx", lpString2="l.dll") returned -1
	[0060.684] lstrlenW (lpString=".pdf") returned 4
	[0060.684] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0060.684] lstrlenW (lpString=".xls") returned 4
	[0060.684] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0060.684] lstrlenW (lpString=".xlsx") returned 5
	[0060.684] lstrcmpiW (lpString1=".xlsx", lpString2="l.dll") returned -1
	[0060.684] lstrlenW (lpString=".ppt") returned 4
	[0060.685] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0060.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll") returned 74
	[0060.685] lstrlenW (lpString=".zip") returned 4
	[0060.685] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0060.685] lstrlenW (lpString=".rar") returned 4
	[0060.685] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0060.685] lstrlenW (lpString=".bz2") returned 4
	[0060.685] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0060.685] lstrlenW (lpString=".7z") returned 3
	[0060.685] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0060.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll") returned 74
	[0060.685] lstrlenW (lpString=".dbf") returned 4
	[0060.685] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0060.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll") returned 74
	[0060.685] lstrlenW (lpString=".1cd") returned 4
	[0060.685] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0060.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll") returned 74
	[0060.685] lstrlenW (lpString=".jpg") returned 4
	[0060.685] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0060.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll") returned 74
	[0060.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll") returned 74
	[0060.685] lstrlenW (lpString=".doc") returned 4
	[0060.685] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0060.685] lstrlenW (lpString=".docx") returned 5
	[0060.685] lstrcmpiW (lpString1=".docx", lpString2="l.dll") returned -1
	[0060.685] lstrlenW (lpString=".pdf") returned 4
	[0060.685] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0060.685] lstrlenW (lpString=".xls") returned 4
	[0060.685] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0060.685] lstrlenW (lpString=".xlsx") returned 5
	[0060.685] lstrcmpiW (lpString1=".xlsx", lpString2="l.dll") returned -1
	[0060.685] lstrlenW (lpString=".ppt") returned 4
	[0060.686] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0060.686] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll") returned 74
	[0060.686] lstrlenW (lpString=".zip") returned 4
	[0060.686] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0060.686] lstrlenW (lpString=".rar") returned 4
	[0060.686] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0060.686] lstrlenW (lpString=".bz2") returned 4
	[0060.686] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0060.686] lstrlenW (lpString=".7z") returned 3
	[0060.686] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0060.686] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll") returned 74
	[0060.686] lstrlenW (lpString=".dbf") returned 4
	[0060.686] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0060.686] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll") returned 74
	[0060.686] lstrlenW (lpString=".1cd") returned 4
	[0060.686] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0060.686] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll") returned 74
	[0060.686] lstrlenW (lpString=".jpg") returned 4
	[0060.686] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0060.686] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0060.686] lstrlenW (lpString="ACEERR.DLL") returned 10
	[0060.686] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0060.687] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=43408) returned 1
	[0060.687] CloseHandle (hObject=0x1d8) returned 1
	[0060.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll")) returned 0x20
	[0060.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0060.687] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0060.688] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.688] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.688] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0060.688] GetLastError () returned 0x0
	[0060.688] ReadFile (in: hFile=0x1d8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0xa990, lpOverlapped=0x0) returned 1
	[0060.690] WriteFile (in: hFile=0x1b8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xa9a0, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xa9a0, lpOverlapped=0x0) returned 1
	[0060.692] ReadFile (in: hFile=0x1d8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.692] WriteFile (in: hFile=0x1b8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0060.692] SetEndOfFile (hFile=0x1b8) returned 1
	[0060.692] CloseHandle (hObject=0x1b8) returned 1
	[0060.692] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.692] SetEndOfFile (hFile=0x1d8) returned 1
	[0060.693] CloseHandle (hObject=0x1d8) returned 1
	[0060.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.693] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll")) returned 1
	[0060.694] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL") returned 66
	[0060.694] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL") returned 66
	[0060.694] lstrlenW (lpString=".doc") returned 4
	[0060.694] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.694] lstrlenW (lpString=".docx") returned 5
	[0060.694] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1
	[0060.694] lstrlenW (lpString=".pdf") returned 4
	[0060.694] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.694] lstrlenW (lpString=".xls") returned 4
	[0060.694] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.694] lstrlenW (lpString=".xlsx") returned 5
	[0060.694] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1
	[0060.694] lstrlenW (lpString=".ppt") returned 4
	[0060.694] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.694] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL") returned 66
	[0060.694] lstrlenW (lpString=".zip") returned 4
	[0060.694] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.694] lstrlenW (lpString=".rar") returned 4
	[0060.694] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.694] lstrlenW (lpString=".bz2") returned 4
	[0060.694] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.694] lstrlenW (lpString=".7z") returned 3
	[0060.694] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.694] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL") returned 66
	[0060.694] lstrlenW (lpString=".dbf") returned 4
	[0060.694] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.694] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL") returned 66
	[0060.694] lstrlenW (lpString=".1cd") returned 4
	[0060.694] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.694] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL") returned 66
	[0060.695] lstrlenW (lpString=".jpg") returned 4
	[0060.695] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.695] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL") returned 66
	[0060.695] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL") returned 66
	[0060.695] lstrlenW (lpString=".doc") returned 4
	[0060.695] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.695] lstrlenW (lpString=".docx") returned 5
	[0060.695] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1
	[0060.695] lstrlenW (lpString=".pdf") returned 4
	[0060.695] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.695] lstrlenW (lpString=".xls") returned 4
	[0060.695] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.695] lstrlenW (lpString=".xlsx") returned 5
	[0060.695] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1
	[0060.695] lstrlenW (lpString=".ppt") returned 4
	[0060.695] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.695] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL") returned 66
	[0060.695] lstrlenW (lpString=".zip") returned 4
	[0060.695] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.695] lstrlenW (lpString=".rar") returned 4
	[0060.695] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.695] lstrlenW (lpString=".bz2") returned 4
	[0060.695] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.695] lstrlenW (lpString=".7z") returned 3
	[0060.695] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.695] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL") returned 66
	[0060.695] lstrlenW (lpString=".dbf") returned 4
	[0060.695] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.695] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL") returned 66
	[0060.695] lstrlenW (lpString=".1cd") returned 4
	[0060.695] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.695] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL") returned 66
	[0060.695] lstrlenW (lpString=".jpg") returned 4
	[0060.696] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.696] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0060.696] lstrlenW (lpString="ACEES.DLL") returned 9
	[0060.696] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0060.697] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=1012648) returned 1
	[0060.697] CloseHandle (hObject=0x1d8) returned 1
	[0060.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll")) returned 0x20
	[0060.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0060.697] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0060.697] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.697] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.697] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0060.697] GetLastError () returned 0x0
	[0060.697] ReadFile (in: hFile=0x1d8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0xf73a8, lpOverlapped=0x0) returned 1
	[0061.074] WriteFile (in: hFile=0x1b8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xf73b0, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xf73b0, lpOverlapped=0x0) returned 1
	[0061.090] ReadFile (in: hFile=0x1d8, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.090] WriteFile (in: hFile=0x1b8, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0061.090] SetEndOfFile (hFile=0x1b8) returned 1
	[0061.090] CloseHandle (hObject=0x1b8) returned 1
	[0061.091] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.091] SetEndOfFile (hFile=0x1d8) returned 1
	[0061.705] CloseHandle (hObject=0x1d8) returned 1
	[0061.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.706] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll")) returned 1
	[0062.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL") returned 65
	[0062.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL") returned 65
	[0062.672] lstrlenW (lpString=".doc") returned 4
	[0062.672] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0062.672] lstrlenW (lpString=".docx") returned 5
	[0062.672] lstrcmpiW (lpString1=".docx", lpString2="S.DLL") returned -1
	[0062.673] lstrlenW (lpString=".pdf") returned 4
	[0062.673] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0062.673] lstrlenW (lpString=".xls") returned 4
	[0062.673] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0062.673] lstrlenW (lpString=".xlsx") returned 5
	[0062.673] lstrcmpiW (lpString1=".xlsx", lpString2="S.DLL") returned -1
	[0062.673] lstrlenW (lpString=".ppt") returned 4
	[0062.673] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0062.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL") returned 65
	[0062.673] lstrlenW (lpString=".zip") returned 4
	[0062.673] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0062.673] lstrlenW (lpString=".rar") returned 4
	[0062.673] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0062.673] lstrlenW (lpString=".bz2") returned 4
	[0062.673] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0062.673] lstrlenW (lpString=".7z") returned 3
	[0062.673] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0062.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL") returned 65
	[0062.673] lstrlenW (lpString=".dbf") returned 4
	[0062.673] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0062.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL") returned 65
	[0062.673] lstrlenW (lpString=".1cd") returned 4
	[0062.673] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0062.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL") returned 65
	[0062.673] lstrlenW (lpString=".jpg") returned 4
	[0062.673] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0062.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL") returned 65
	[0062.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL") returned 65
	[0062.674] lstrlenW (lpString=".doc") returned 4
	[0062.674] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0062.674] lstrlenW (lpString=".docx") returned 5
	[0062.674] lstrcmpiW (lpString1=".docx", lpString2="S.DLL") returned -1
	[0062.674] lstrlenW (lpString=".pdf") returned 4
	[0062.674] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0062.674] lstrlenW (lpString=".xls") returned 4
	[0062.674] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0062.674] lstrlenW (lpString=".xlsx") returned 5
	[0062.674] lstrcmpiW (lpString1=".xlsx", lpString2="S.DLL") returned -1
	[0062.674] lstrlenW (lpString=".ppt") returned 4
	[0062.674] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0062.674] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL") returned 65
	[0062.674] lstrlenW (lpString=".zip") returned 4
	[0062.674] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0062.674] lstrlenW (lpString=".rar") returned 4
	[0062.674] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0062.674] lstrlenW (lpString=".bz2") returned 4
	[0062.674] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0062.674] lstrlenW (lpString=".7z") returned 3
	[0062.674] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0062.674] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL") returned 65
	[0062.674] lstrlenW (lpString=".dbf") returned 4
	[0062.674] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0062.674] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL") returned 65
	[0062.674] lstrlenW (lpString=".1cd") returned 4
	[0062.674] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0062.674] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL") returned 65
	[0062.674] lstrlenW (lpString=".jpg") returned 4
	[0062.674] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0062.675] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0062.675] lstrlenW (lpString="ACER3X.DLL") returned 10
	[0062.675] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0062.879] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=451480) returned 1
	[0062.879] CloseHandle (hObject=0x1e4) returned 1
	[0062.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll")) returned 0x20
	[0062.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0062.879] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0062.880] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.880] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.880] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0063.572] GetLastError () returned 0x0
	[0063.572] ReadFile (in: hFile=0x1e4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x6e398, lpOverlapped=0x0) returned 1
	[0063.616] WriteFile (in: hFile=0x208, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x6e3a0, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x6e3a0, lpOverlapped=0x0) returned 1
	[0063.624] ReadFile (in: hFile=0x1e4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.624] WriteFile (in: hFile=0x208, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0063.624] SetEndOfFile (hFile=0x208) returned 1
	[0063.624] CloseHandle (hObject=0x208) returned 1
	[0063.624] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.624] SetEndOfFile (hFile=0x1e4) returned 1
	[0063.628] CloseHandle (hObject=0x1e4) returned 1
	[0063.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.629] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll")) returned 1
	[0063.629] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL") returned 66
	[0063.629] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL") returned 66
	[0063.629] lstrlenW (lpString=".doc") returned 4
	[0063.629] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0063.629] lstrlenW (lpString=".docx") returned 5
	[0063.629] lstrcmpiW (lpString1=".docx", lpString2="X.DLL") returned -1
	[0063.629] lstrlenW (lpString=".pdf") returned 4
	[0063.629] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0063.629] lstrlenW (lpString=".xls") returned 4
	[0063.629] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0063.629] lstrlenW (lpString=".xlsx") returned 5
	[0063.629] lstrcmpiW (lpString1=".xlsx", lpString2="X.DLL") returned -1
	[0063.629] lstrlenW (lpString=".ppt") returned 4
	[0063.629] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0063.629] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL") returned 66
	[0063.629] lstrlenW (lpString=".zip") returned 4
	[0063.629] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0063.629] lstrlenW (lpString=".rar") returned 4
	[0063.629] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0063.629] lstrlenW (lpString=".bz2") returned 4
	[0063.629] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0063.629] lstrlenW (lpString=".7z") returned 3
	[0063.629] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0063.629] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL") returned 66
	[0063.629] lstrlenW (lpString=".dbf") returned 4
	[0063.630] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0063.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL") returned 66
	[0063.630] lstrlenW (lpString=".1cd") returned 4
	[0063.630] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0063.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL") returned 66
	[0063.630] lstrlenW (lpString=".jpg") returned 4
	[0063.630] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0063.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL") returned 66
	[0063.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL") returned 66
	[0063.630] lstrlenW (lpString=".doc") returned 4
	[0063.630] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0063.630] lstrlenW (lpString=".docx") returned 5
	[0063.630] lstrcmpiW (lpString1=".docx", lpString2="X.DLL") returned -1
	[0063.630] lstrlenW (lpString=".pdf") returned 4
	[0063.630] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0063.630] lstrlenW (lpString=".xls") returned 4
	[0063.630] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0063.630] lstrlenW (lpString=".xlsx") returned 5
	[0063.630] lstrcmpiW (lpString1=".xlsx", lpString2="X.DLL") returned -1
	[0063.630] lstrlenW (lpString=".ppt") returned 4
	[0063.630] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0063.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL") returned 66
	[0063.630] lstrlenW (lpString=".zip") returned 4
	[0063.630] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0063.630] lstrlenW (lpString=".rar") returned 4
	[0063.630] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0063.630] lstrlenW (lpString=".bz2") returned 4
	[0063.630] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0063.630] lstrlenW (lpString=".7z") returned 3
	[0063.630] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0063.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL") returned 66
	[0063.630] lstrlenW (lpString=".dbf") returned 4
	[0063.631] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0063.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL") returned 66
	[0063.631] lstrlenW (lpString=".1cd") returned 4
	[0063.631] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0063.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL") returned 66
	[0063.631] lstrlenW (lpString=".jpg") returned 4
	[0063.631] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0063.631] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0063.631] lstrlenW (lpString="ACEWSS.DLL") returned 10
	[0063.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0063.632] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x847ff1c | out: lpFileSize=0x847ff1c*=318368) returned 1
	[0063.632] CloseHandle (hObject=0x1e4) returned 1
	[0063.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll")) returned 0x20
	[0063.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0063.633] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0063.633] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.633] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.633] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0063.635] GetLastError () returned 0x0
	[0063.635] ReadFile (in: hFile=0x1e4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x4dba0, lpOverlapped=0x0) returned 1
	[0063.645] WriteFile (in: hFile=0x22c, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0x4dbb0, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0x4dbb0, lpOverlapped=0x0) returned 1
	[0063.653] ReadFile (in: hFile=0x1e4, lpBuffer=0x8b40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x847fed4, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesRead=0x847fed4*=0x0, lpOverlapped=0x0) returned 1
	[0063.653] WriteFile (in: hFile=0x22c, lpBuffer=0x8b40020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x847fc9c, lpOverlapped=0x0 | out: lpBuffer=0x8b40020*, lpNumberOfBytesWritten=0x847fc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0063.653] SetEndOfFile (hFile=0x22c) returned 1
	[0063.653] CloseHandle (hObject=0x22c) returned 1
	[0063.653] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x847fec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.653] SetEndOfFile (hFile=0x1e4) 

Thread:
	id = 18
	os_tid = 0xa58

	[0035.839] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x8c50048
	[0035.840] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10000) returned 0x8c60050
	[0035.840] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0b00
	[0035.840] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x6) returned 0x53dd758
	[0035.840] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0b18
	[0035.840] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x100000) returned 0x8e50020
	[0035.840] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0b30
	[0035.840] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0b30, Size=0x20) returned 0x53e70b0
	[0035.840] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x10) returned 0x53e0b30
	[0035.840] RtlReAllocateHeap (Heap=0x5350000, Flags=0x0, Ptr=0x53e0b30, Size=0x20) returned 0x53e7088
	[0035.841] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000
	[0035.841] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0035.841] Wow64DisableWow64FsRedirection (in: OldValue=0x86cff58 | out: OldValue=0x86cff58*=0x0) returned 1
	[0035.841] lstrlenW (lpString="kernel32.dll") returned 12
	[0035.841] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e70b0 | out: hHeap=0x5350000) returned 1
	[0035.841] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0035.841] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x53e7088 | out: hHeap=0x5350000) returned 1
	[0035.841] Sleep (dwMilliseconds=0x64) 
	[0036.183] lstrcmpiW (lpString1=".ttf", lpString2=".beets") returned 1
	[0036.183] lstrlenW (lpString="wgl4_boot.ttf") returned 13
	[0036.183] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0036.403] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=47452) returned 1
	[0036.403] CloseHandle (hObject=0x1bc) returned 1
	[0036.403] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20
	[0036.403] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.403] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0036.403] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27
	[0036.403] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27
	[0036.403] lstrlenW (lpString=".doc") returned 4
	[0036.403] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0036.403] lstrlenW (lpString=".docx") returned 5
	[0036.403] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0036.403] lstrlenW (lpString=".pdf") returned 4
	[0036.403] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0036.403] lstrlenW (lpString=".xls") returned 4
	[0036.403] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0036.403] lstrlenW (lpString=".xlsx") returned 5
	[0036.403] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0036.403] lstrlenW (lpString=".ppt") returned 4
	[0036.403] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0036.403] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27
	[0036.403] lstrlenW (lpString=".zip") returned 4
	[0036.403] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0036.403] lstrlenW (lpString=".rar") returned 4
	[0036.403] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0036.403] lstrlenW (lpString=".bz2") returned 4
	[0036.403] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0036.404] lstrlenW (lpString=".7z") returned 3
	[0036.404] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0036.404] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27
	[0036.404] lstrlenW (lpString=".dbf") returned 4
	[0036.404] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0036.404] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27
	[0036.404] lstrlenW (lpString=".1cd") returned 4
	[0036.404] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0036.404] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27
	[0036.404] lstrlenW (lpString=".jpg") returned 4
	[0036.404] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0036.404] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27
	[0036.404] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27
	[0036.404] lstrlenW (lpString=".doc") returned 4
	[0036.404] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0036.404] lstrlenW (lpString=".docx") returned 5
	[0036.404] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0036.404] lstrlenW (lpString=".pdf") returned 4
	[0036.404] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0036.404] lstrlenW (lpString=".xls") returned 4
	[0036.404] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0036.404] lstrlenW (lpString=".xlsx") returned 5
	[0036.404] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0036.404] lstrlenW (lpString=".ppt") returned 4
	[0036.404] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0036.404] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27
	[0036.404] lstrlenW (lpString=".zip") returned 4
	[0036.404] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0036.404] lstrlenW (lpString=".rar") returned 4
	[0036.404] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0036.404] lstrlenW (lpString=".bz2") returned 4
	[0036.404] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0036.405] lstrlenW (lpString=".7z") returned 3
	[0036.405] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0036.405] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27
	[0036.405] lstrlenW (lpString=".dbf") returned 4
	[0036.405] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0036.405] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27
	[0036.405] lstrlenW (lpString=".1cd") returned 4
	[0036.405] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0036.405] lstrlenW (lpString="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 27
	[0036.405] lstrlenW (lpString=".jpg") returned 4
	[0036.405] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0036.405] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0036.405] lstrlenW (lpString="ExcelMUI.msi") returned 12
	[0036.405] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0036.405] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=2506240) returned 1
	[0036.405] CloseHandle (hObject=0x1bc) returned 1
	[0036.405] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi")) returned 0x2020
	[0036.405] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0036.405] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0036.406] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0036.406] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0036.406] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0036.406] ReadFile (in: hFile=0x1bc, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0036.412] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xcbf55, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0036.412] ReadFile (in: hFile=0x1bc, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0036.426] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0036.426] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x223e00, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0036.426] ReadFile (in: hFile=0x1bc, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0036.445] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0036.445] WriteFile (in: hFile=0x1bc, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0036.792] SetEndOfFile (hFile=0x1bc) returned 1
	[0036.792] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d4d118
	[0036.993] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0036.993] WriteFile (in: hFile=0x1bc, lpBuffer=0x8d4d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d4d118*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0036.994] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xcbf55, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0036.994] WriteFile (in: hFile=0x1bc, lpBuffer=0x8d4d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d4d118*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0037.000] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x223e00, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0037.001] WriteFile (in: hFile=0x1bc, lpBuffer=0x8d4d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d4d118*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0037.003] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d4d118 | out: hHeap=0x5350000) returned 1
	[0037.003] CloseHandle (hObject=0x1bc) returned 1
	[0037.958] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0037.958] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75
	[0037.958] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75
	[0037.958] lstrlenW (lpString=".doc") returned 4
	[0037.958] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0037.958] lstrlenW (lpString=".docx") returned 5
	[0037.958] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0037.958] lstrlenW (lpString=".pdf") returned 4
	[0037.958] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0037.958] lstrlenW (lpString=".xls") returned 4
	[0037.958] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0037.958] lstrlenW (lpString=".xlsx") returned 5
	[0037.958] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0037.958] lstrlenW (lpString=".ppt") returned 4
	[0037.958] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0037.958] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75
	[0037.958] lstrlenW (lpString=".zip") returned 4
	[0037.958] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0037.958] lstrlenW (lpString=".rar") returned 4
	[0037.958] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0037.958] lstrlenW (lpString=".bz2") returned 4
	[0037.958] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0037.958] lstrlenW (lpString=".7z") returned 3
	[0037.959] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0037.959] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75
	[0037.959] lstrlenW (lpString=".dbf") returned 4
	[0037.959] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0037.959] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75
	[0037.959] lstrlenW (lpString=".1cd") returned 4
	[0037.959] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0037.959] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75
	[0037.959] lstrlenW (lpString=".jpg") returned 4
	[0037.959] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0037.959] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75
	[0037.959] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75
	[0037.959] lstrlenW (lpString=".doc") returned 4
	[0037.959] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0037.959] lstrlenW (lpString=".docx") returned 5
	[0037.959] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0037.959] lstrlenW (lpString=".pdf") returned 4
	[0037.959] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0037.959] lstrlenW (lpString=".xls") returned 4
	[0037.959] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0037.959] lstrlenW (lpString=".xlsx") returned 5
	[0037.959] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0037.959] lstrlenW (lpString=".ppt") returned 4
	[0037.959] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0037.959] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75
	[0037.959] lstrlenW (lpString=".zip") returned 4
	[0037.959] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0037.959] lstrlenW (lpString=".rar") returned 4
	[0037.959] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0037.959] lstrlenW (lpString=".bz2") returned 4
	[0037.959] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0037.959] lstrlenW (lpString=".7z") returned 3
	[0037.960] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0037.960] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75
	[0037.960] lstrlenW (lpString=".dbf") returned 4
	[0037.960] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0037.960] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75
	[0037.960] lstrlenW (lpString=".1cd") returned 4
	[0037.960] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0037.960] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 75
	[0037.960] lstrlenW (lpString=".jpg") returned 4
	[0037.960] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0037.960] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0037.960] lstrlenW (lpString="PublisherMUI.msi") returned 16
	[0037.960] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0037.960] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=2513920) returned 1
	[0037.960] CloseHandle (hObject=0x1bc) returned 1
	[0037.960] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi")) returned 0x2020
	[0037.960] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0037.961] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0037.961] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0037.961] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0037.961] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0037.961] ReadFile (in: hFile=0x1bc, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0037.965] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xcc955, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0037.965] ReadFile (in: hFile=0x1bc, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0037.975] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0037.975] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x225c00, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0037.975] ReadFile (in: hFile=0x1bc, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0037.992] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0037.992] WriteFile (in: hFile=0x1bc, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc010c, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc010c, lpOverlapped=0x0) returned 1
	[0038.356] SetEndOfFile (hFile=0x1bc) returned 1
	[0038.356] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d5d118
	[0038.360] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0038.360] WriteFile (in: hFile=0x1bc, lpBuffer=0x8d5d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d118*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0038.361] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xcc955, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0038.361] WriteFile (in: hFile=0x1bc, lpBuffer=0x8d5d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d118*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0038.367] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x225c00, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0038.367] WriteFile (in: hFile=0x1bc, lpBuffer=0x8d5d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d118*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0038.370] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d5d118 | out: hHeap=0x5350000) returned 1
	[0038.370] CloseHandle (hObject=0x1bc) returned 1
	[0038.908] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0038.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0038.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0038.908] lstrlenW (lpString=".doc") returned 4
	[0038.908] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0038.908] lstrlenW (lpString=".docx") returned 5
	[0038.908] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0038.908] lstrlenW (lpString=".pdf") returned 4
	[0038.908] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0038.908] lstrlenW (lpString=".xls") returned 4
	[0038.908] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0038.908] lstrlenW (lpString=".xlsx") returned 5
	[0038.908] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0038.908] lstrlenW (lpString=".ppt") returned 4
	[0038.908] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0038.908] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0038.908] lstrlenW (lpString=".zip") returned 4
	[0038.908] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0038.908] lstrlenW (lpString=".rar") returned 4
	[0038.909] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0038.909] lstrlenW (lpString=".bz2") returned 4
	[0038.909] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0038.909] lstrlenW (lpString=".7z") returned 3
	[0038.909] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0038.909] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0038.909] lstrlenW (lpString=".dbf") returned 4
	[0038.909] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0038.909] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0038.909] lstrlenW (lpString=".1cd") returned 4
	[0038.909] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0038.909] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0038.909] lstrlenW (lpString=".jpg") returned 4
	[0038.909] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0038.909] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0038.909] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0038.909] lstrlenW (lpString=".doc") returned 4
	[0038.909] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0038.909] lstrlenW (lpString=".docx") returned 5
	[0038.909] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0038.909] lstrlenW (lpString=".pdf") returned 4
	[0038.909] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0038.909] lstrlenW (lpString=".xls") returned 4
	[0038.909] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0038.909] lstrlenW (lpString=".xlsx") returned 5
	[0038.909] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0038.909] lstrlenW (lpString=".ppt") returned 4
	[0038.909] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0038.909] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0038.909] lstrlenW (lpString=".zip") returned 4
	[0038.909] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0038.910] lstrlenW (lpString=".rar") returned 4
	[0038.910] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0038.910] lstrlenW (lpString=".bz2") returned 4
	[0038.910] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0038.910] lstrlenW (lpString=".7z") returned 3
	[0038.910] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0038.910] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0038.910] lstrlenW (lpString=".dbf") returned 4
	[0038.910] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0038.910] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0038.910] lstrlenW (lpString=".1cd") returned 4
	[0038.910] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0038.910] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 79
	[0038.910] lstrlenW (lpString=".jpg") returned 4
	[0038.910] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0038.910] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0038.910] lstrlenW (lpString="OutlkLR.cab") returned 11
	[0038.910] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0038.910] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=14819276) returned 1
	[0038.910] CloseHandle (hObject=0x1bc) returned 1
	[0038.911] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab")) returned 0x2020
	[0038.911] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0038.911] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0038.911] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0038.911] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0038.911] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0038.911] ReadFile (in: hFile=0x1bc, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0039.010] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x4b5fee, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0039.010] ReadFile (in: hFile=0x1bc, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0039.028] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0039.028] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xde1fcc, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0039.028] ReadFile (in: hFile=0x1bc, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0039.048] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0039.048] WriteFile (in: hFile=0x1bc, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc0102, lpOverlapped=0x0) returned 1
	[0039.064] SetEndOfFile (hFile=0x1bc) returned 1
	[0039.064] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d5d118
	[0039.146] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0039.146] WriteFile (in: hFile=0x1bc, lpBuffer=0x8d5d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d118*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0039.300] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x4b5fee, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0039.300] WriteFile (in: hFile=0x1bc, lpBuffer=0x8d5d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d118*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0039.301] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xde1fcc, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0039.301] WriteFile (in: hFile=0x1bc, lpBuffer=0x8d5d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d118*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0039.302] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d5d118 | out: hHeap=0x5350000) returned 1
	[0039.308] CloseHandle (hObject=0x1bc) returned 1
	[0042.036] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0042.037] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0042.037] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0042.037] lstrlenW (lpString=".doc") returned 4
	[0042.037] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0042.037] lstrlenW (lpString=".docx") returned 5
	[0042.037] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0042.037] lstrlenW (lpString=".pdf") returned 4
	[0042.037] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0042.037] lstrlenW (lpString=".xls") returned 4
	[0042.037] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0042.037] lstrlenW (lpString=".xlsx") returned 5
	[0042.037] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0042.037] lstrlenW (lpString=".ppt") returned 4
	[0042.037] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0042.037] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0042.037] lstrlenW (lpString=".zip") returned 4
	[0042.037] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0042.037] lstrlenW (lpString=".rar") returned 4
	[0042.037] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0042.037] lstrlenW (lpString=".bz2") returned 4
	[0042.037] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0042.037] lstrlenW (lpString=".7z") returned 3
	[0042.037] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0042.037] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0042.037] lstrlenW (lpString=".dbf") returned 4
	[0042.037] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0042.037] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0042.037] lstrlenW (lpString=".1cd") returned 4
	[0042.037] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0042.037] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0042.037] lstrlenW (lpString=".jpg") returned 4
	[0042.038] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0042.038] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0042.038] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0042.038] lstrlenW (lpString=".doc") returned 4
	[0042.038] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0042.038] lstrlenW (lpString=".docx") returned 5
	[0042.038] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0042.038] lstrlenW (lpString=".pdf") returned 4
	[0042.038] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0042.038] lstrlenW (lpString=".xls") returned 4
	[0042.038] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0042.038] lstrlenW (lpString=".xlsx") returned 5
	[0042.038] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0042.038] lstrlenW (lpString=".ppt") returned 4
	[0042.038] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0042.038] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0042.038] lstrlenW (lpString=".zip") returned 4
	[0042.038] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0042.038] lstrlenW (lpString=".rar") returned 4
	[0042.038] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0042.038] lstrlenW (lpString=".bz2") returned 4
	[0042.038] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0042.038] lstrlenW (lpString=".7z") returned 3
	[0042.038] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0042.038] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0042.038] lstrlenW (lpString=".dbf") returned 4
	[0042.038] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0042.038] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0042.038] lstrlenW (lpString=".1cd") returned 4
	[0042.038] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0042.038] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 74
	[0042.038] lstrlenW (lpString=".jpg") returned 4
	[0042.039] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0042.039] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0042.039] lstrlenW (lpString="Proof.msi") returned 9
	[0042.039] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0042.549] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=875520) returned 1
	[0042.549] CloseHandle (hObject=0x1e8) returned 1
	[0042.549] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi")) returned 0x2020
	[0042.550] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0042.550] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0042.550] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.550] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.550] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0042.550] GetLastError () returned 0x0
	[0042.550] ReadFile (in: hFile=0x1e8, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xd5c00, lpOverlapped=0x0) returned 1
	[0042.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xd5c10, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xd5c10, lpOverlapped=0x0) returned 1
	[0042.587] ReadFile (in: hFile=0x1e8, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0042.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0042.587] SetEndOfFile (hFile=0x1e4) returned 1
	[0042.587] CloseHandle (hObject=0x1e4) returned 1
	[0042.594] SetFilePointerEx (in: hFile=0x1e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0042.594] SetEndOfFile (hFile=0x1e8) returned 1
	[0042.820] CloseHandle (hObject=0x1e8) returned 1
	[0042.820] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0042.820] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi")) returned 1
	[0042.820] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81
	[0042.820] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81
	[0042.821] lstrlenW (lpString=".doc") returned 4
	[0042.821] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0042.821] lstrlenW (lpString=".docx") returned 5
	[0042.821] lstrcmpiW (lpString1=".docx", lpString2="f.msi") returned -1
	[0042.821] lstrlenW (lpString=".pdf") returned 4
	[0042.821] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0042.821] lstrlenW (lpString=".xls") returned 4
	[0042.821] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0042.821] lstrlenW (lpString=".xlsx") returned 5
	[0042.821] lstrcmpiW (lpString1=".xlsx", lpString2="f.msi") returned -1
	[0042.821] lstrlenW (lpString=".ppt") returned 4
	[0042.821] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0042.821] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81
	[0042.821] lstrlenW (lpString=".zip") returned 4
	[0042.821] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0042.821] lstrlenW (lpString=".rar") returned 4
	[0042.821] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0042.821] lstrlenW (lpString=".bz2") returned 4
	[0042.821] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0042.821] lstrlenW (lpString=".7z") returned 3
	[0042.821] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0042.821] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81
	[0042.821] lstrlenW (lpString=".dbf") returned 4
	[0042.821] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0042.821] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81
	[0042.821] lstrlenW (lpString=".1cd") returned 4
	[0042.821] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0042.821] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81
	[0042.821] lstrlenW (lpString=".jpg") returned 4
	[0042.821] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0042.821] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81
	[0042.821] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81
	[0042.822] lstrlenW (lpString=".doc") returned 4
	[0042.822] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0042.822] lstrlenW (lpString=".docx") returned 5
	[0042.822] lstrcmpiW (lpString1=".docx", lpString2="f.msi") returned -1
	[0042.822] lstrlenW (lpString=".pdf") returned 4
	[0042.822] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0042.822] lstrlenW (lpString=".xls") returned 4
	[0042.822] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0042.822] lstrlenW (lpString=".xlsx") returned 5
	[0042.822] lstrcmpiW (lpString1=".xlsx", lpString2="f.msi") returned -1
	[0042.822] lstrlenW (lpString=".ppt") returned 4
	[0042.822] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0042.822] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81
	[0042.822] lstrlenW (lpString=".zip") returned 4
	[0042.822] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0042.822] lstrlenW (lpString=".rar") returned 4
	[0042.822] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0042.822] lstrlenW (lpString=".bz2") returned 4
	[0042.822] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0042.822] lstrlenW (lpString=".7z") returned 3
	[0042.822] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0042.822] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81
	[0042.822] lstrlenW (lpString=".dbf") returned 4
	[0042.822] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0042.822] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81
	[0042.822] lstrlenW (lpString=".1cd") returned 4
	[0042.822] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0042.822] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 81
	[0042.822] lstrlenW (lpString=".jpg") returned 4
	[0042.822] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0042.823] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0042.823] lstrlenW (lpString="Proof.msi") returned 9
	[0042.823] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0043.429] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=881152) returned 1
	[0043.429] CloseHandle (hObject=0x214) returned 1
	[0043.429] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi")) returned 0x2020
	[0043.429] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0043.429] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0043.429] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.429] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.429] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0043.429] GetLastError () returned 0x0
	[0043.429] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xd7200, lpOverlapped=0x0) returned 1
	[0043.578] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xd7210, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xd7210, lpOverlapped=0x0) returned 1
	[0043.800] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0043.800] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0043.800] SetEndOfFile (hFile=0x220) returned 1
	[0043.800] CloseHandle (hObject=0x220) returned 1
	[0043.807] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.807] SetEndOfFile (hFile=0x214) returned 1
	[0043.815] CloseHandle (hObject=0x214) returned 1
	[0043.815] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0043.815] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi")) returned 1
	[0043.815] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81
	[0043.815] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81
	[0043.816] lstrlenW (lpString=".doc") returned 4
	[0043.816] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0043.816] lstrlenW (lpString=".docx") returned 5
	[0043.816] lstrcmpiW (lpString1=".docx", lpString2="f.msi") returned -1
	[0043.816] lstrlenW (lpString=".pdf") returned 4
	[0043.816] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0043.816] lstrlenW (lpString=".xls") returned 4
	[0043.816] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0043.816] lstrlenW (lpString=".xlsx") returned 5
	[0043.816] lstrcmpiW (lpString1=".xlsx", lpString2="f.msi") returned -1
	[0043.816] lstrlenW (lpString=".ppt") returned 4
	[0043.816] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0043.816] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81
	[0043.816] lstrlenW (lpString=".zip") returned 4
	[0043.816] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0043.816] lstrlenW (lpString=".rar") returned 4
	[0043.816] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0043.816] lstrlenW (lpString=".bz2") returned 4
	[0043.816] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0043.816] lstrlenW (lpString=".7z") returned 3
	[0043.816] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0043.816] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81
	[0043.816] lstrlenW (lpString=".dbf") returned 4
	[0043.816] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0043.816] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81
	[0043.816] lstrlenW (lpString=".1cd") returned 4
	[0043.816] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0043.816] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81
	[0043.816] lstrlenW (lpString=".jpg") returned 4
	[0043.816] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0043.816] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81
	[0043.816] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81
	[0043.817] lstrlenW (lpString=".doc") returned 4
	[0043.817] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0043.817] lstrlenW (lpString=".docx") returned 5
	[0043.817] lstrcmpiW (lpString1=".docx", lpString2="f.msi") returned -1
	[0043.817] lstrlenW (lpString=".pdf") returned 4
	[0043.817] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0043.817] lstrlenW (lpString=".xls") returned 4
	[0043.817] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0043.817] lstrlenW (lpString=".xlsx") returned 5
	[0043.817] lstrcmpiW (lpString1=".xlsx", lpString2="f.msi") returned -1
	[0043.817] lstrlenW (lpString=".ppt") returned 4
	[0043.817] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0043.817] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81
	[0043.817] lstrlenW (lpString=".zip") returned 4
	[0043.817] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0043.817] lstrlenW (lpString=".rar") returned 4
	[0043.817] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0043.817] lstrlenW (lpString=".bz2") returned 4
	[0043.817] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0043.817] lstrlenW (lpString=".7z") returned 3
	[0043.817] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0043.817] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81
	[0043.817] lstrlenW (lpString=".dbf") returned 4
	[0043.817] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0043.817] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81
	[0043.817] lstrlenW (lpString=".1cd") returned 4
	[0043.817] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0043.817] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 81
	[0043.817] lstrlenW (lpString=".jpg") returned 4
	[0043.817] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0043.818] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0043.818] lstrlenW (lpString="Proof.msi") returned 9
	[0043.818] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0043.818] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=885760) returned 1
	[0043.818] CloseHandle (hObject=0x214) returned 1
	[0043.818] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi")) returned 0x2020
	[0043.818] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0043.818] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0043.818] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.818] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0043.818] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0043.819] GetLastError () returned 0x0
	[0043.819] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xd8400, lpOverlapped=0x0) returned 1
	[0044.471] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xd8410, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xd8410, lpOverlapped=0x0) returned 1
	[0044.488] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0044.488] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0044.489] SetEndOfFile (hFile=0x220) returned 1
	[0044.489] CloseHandle (hObject=0x220) returned 1
	[0044.496] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.496] SetEndOfFile (hFile=0x214) returned 1
	[0044.804] CloseHandle (hObject=0x214) returned 1
	[0044.805] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0044.805] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi")) returned 1
	[0044.805] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81
	[0044.805] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81
	[0044.805] lstrlenW (lpString=".doc") returned 4
	[0044.805] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0044.805] lstrlenW (lpString=".docx") returned 5
	[0044.805] lstrcmpiW (lpString1=".docx", lpString2="f.msi") returned -1
	[0044.805] lstrlenW (lpString=".pdf") returned 4
	[0044.805] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0044.805] lstrlenW (lpString=".xls") returned 4
	[0044.805] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0044.805] lstrlenW (lpString=".xlsx") returned 5
	[0044.805] lstrcmpiW (lpString1=".xlsx", lpString2="f.msi") returned -1
	[0044.805] lstrlenW (lpString=".ppt") returned 4
	[0044.805] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0044.805] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81
	[0044.805] lstrlenW (lpString=".zip") returned 4
	[0044.806] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0044.806] lstrlenW (lpString=".rar") returned 4
	[0044.806] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0044.806] lstrlenW (lpString=".bz2") returned 4
	[0044.806] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0044.806] lstrlenW (lpString=".7z") returned 3
	[0044.806] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0044.806] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81
	[0044.806] lstrlenW (lpString=".dbf") returned 4
	[0044.806] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0044.806] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81
	[0044.806] lstrlenW (lpString=".1cd") returned 4
	[0044.806] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0044.806] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81
	[0044.806] lstrlenW (lpString=".jpg") returned 4
	[0044.806] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0044.806] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81
	[0044.806] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81
	[0044.806] lstrlenW (lpString=".doc") returned 4
	[0044.806] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0044.806] lstrlenW (lpString=".docx") returned 5
	[0044.806] lstrcmpiW (lpString1=".docx", lpString2="f.msi") returned -1
	[0044.806] lstrlenW (lpString=".pdf") returned 4
	[0044.806] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0044.806] lstrlenW (lpString=".xls") returned 4
	[0044.806] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0044.806] lstrlenW (lpString=".xlsx") returned 5
	[0044.806] lstrcmpiW (lpString1=".xlsx", lpString2="f.msi") returned -1
	[0044.806] lstrlenW (lpString=".ppt") returned 4
	[0044.806] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0044.806] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81
	[0044.807] lstrlenW (lpString=".zip") returned 4
	[0044.807] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0044.807] lstrlenW (lpString=".rar") returned 4
	[0044.807] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0044.807] lstrlenW (lpString=".bz2") returned 4
	[0044.807] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0044.807] lstrlenW (lpString=".7z") returned 3
	[0044.807] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0044.807] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81
	[0044.807] lstrlenW (lpString=".dbf") returned 4
	[0044.807] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0044.807] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81
	[0044.807] lstrlenW (lpString=".1cd") returned 4
	[0044.807] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0044.807] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 81
	[0044.807] lstrlenW (lpString=".jpg") returned 4
	[0044.807] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0044.807] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0044.807] lstrlenW (lpString="Proofing.msi") returned 12
	[0044.807] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0044.808] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=868864) returned 1
	[0044.808] CloseHandle (hObject=0x214) returned 1
	[0044.808] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi")) returned 0x2020
	[0044.808] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0044.808] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0044.808] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.808] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0044.808] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0044.808] GetLastError () returned 0x0
	[0044.808] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xd4200, lpOverlapped=0x0) returned 1
	[0044.832] WriteFile (in: hFile=0x210, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xd4210, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xd4210, lpOverlapped=0x0) returned 1
	[0045.802] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0045.802] WriteFile (in: hFile=0x210, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0045.802] SetEndOfFile (hFile=0x210) returned 1
	[0045.802] CloseHandle (hObject=0x210) returned 1
	[0045.809] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0045.809] SetEndOfFile (hFile=0x214) returned 1
	[0045.817] CloseHandle (hObject=0x214) returned 1
	[0045.817] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0045.817] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi")) returned 1
	[0045.818] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0045.818] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0045.818] lstrlenW (lpString=".doc") returned 4
	[0045.818] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0045.818] lstrlenW (lpString=".docx") returned 5
	[0045.818] lstrcmpiW (lpString1=".docx", lpString2="g.msi") returned -1
	[0045.818] lstrlenW (lpString=".pdf") returned 4
	[0045.818] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0045.818] lstrlenW (lpString=".xls") returned 4
	[0045.818] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0045.818] lstrlenW (lpString=".xlsx") returned 5
	[0045.818] lstrcmpiW (lpString1=".xlsx", lpString2="g.msi") returned -1
	[0045.818] lstrlenW (lpString=".ppt") returned 4
	[0045.818] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0045.818] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0045.818] lstrlenW (lpString=".zip") returned 4
	[0045.818] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0045.818] lstrlenW (lpString=".rar") returned 4
	[0045.818] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0045.818] lstrlenW (lpString=".bz2") returned 4
	[0045.818] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0045.818] lstrlenW (lpString=".7z") returned 3
	[0045.818] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0045.818] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0045.818] lstrlenW (lpString=".dbf") returned 4
	[0045.818] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0045.818] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0045.818] lstrlenW (lpString=".1cd") returned 4
	[0045.818] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0045.818] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0045.818] lstrlenW (lpString=".jpg") returned 4
	[0045.818] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0045.819] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0045.819] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0045.819] lstrlenW (lpString=".doc") returned 4
	[0045.819] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0045.819] lstrlenW (lpString=".docx") returned 5
	[0045.819] lstrcmpiW (lpString1=".docx", lpString2="g.msi") returned -1
	[0045.819] lstrlenW (lpString=".pdf") returned 4
	[0045.819] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0045.819] lstrlenW (lpString=".xls") returned 4
	[0045.819] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0045.819] lstrlenW (lpString=".xlsx") returned 5
	[0045.819] lstrcmpiW (lpString1=".xlsx", lpString2="g.msi") returned -1
	[0045.819] lstrlenW (lpString=".ppt") returned 4
	[0045.819] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0045.819] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0045.819] lstrlenW (lpString=".zip") returned 4
	[0045.819] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0045.819] lstrlenW (lpString=".rar") returned 4
	[0045.819] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0045.819] lstrlenW (lpString=".bz2") returned 4
	[0045.819] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0045.819] lstrlenW (lpString=".7z") returned 3
	[0045.819] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0045.819] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0045.819] lstrlenW (lpString=".dbf") returned 4
	[0045.819] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0045.819] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0045.819] lstrlenW (lpString=".1cd") returned 4
	[0045.819] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0045.819] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 75
	[0045.819] lstrlenW (lpString=".jpg") returned 4
	[0045.819] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0045.820] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0045.820] lstrlenW (lpString="Office32MUI.msi") returned 15
	[0045.820] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0045.820] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=873984) returned 1
	[0045.820] CloseHandle (hObject=0x214) returned 1
	[0045.820] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi")) returned 0x2020
	[0045.820] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0045.820] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0045.820] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0045.820] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0045.820] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0045.821] GetLastError () returned 0x0
	[0045.821] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xd5600, lpOverlapped=0x0) returned 1
	[0045.871] WriteFile (in: hFile=0x210, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xd5610, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xd5610, lpOverlapped=0x0) returned 1
	[0046.201] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0046.201] WriteFile (in: hFile=0x210, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xf2, lpOverlapped=0x0) returned 1
	[0046.201] SetEndOfFile (hFile=0x210) returned 1
	[0046.201] CloseHandle (hObject=0x210) returned 1
	[0046.208] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.208] SetEndOfFile (hFile=0x214) returned 1
	[0046.215] CloseHandle (hObject=0x214) returned 1
	[0046.216] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0046.216] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi")) returned 1
	[0046.216] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0046.216] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0046.216] lstrlenW (lpString=".doc") returned 4
	[0046.216] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0046.216] lstrlenW (lpString=".docx") returned 5
	[0046.216] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0046.216] lstrlenW (lpString=".pdf") returned 4
	[0046.216] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0046.216] lstrlenW (lpString=".xls") returned 4
	[0046.216] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0046.216] lstrlenW (lpString=".xlsx") returned 5
	[0046.216] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0046.216] lstrlenW (lpString=".ppt") returned 4
	[0046.216] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0046.216] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0046.216] lstrlenW (lpString=".zip") returned 4
	[0046.216] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0046.217] lstrlenW (lpString=".rar") returned 4
	[0046.217] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0046.217] lstrlenW (lpString=".bz2") returned 4
	[0046.217] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0046.217] lstrlenW (lpString=".7z") returned 3
	[0046.217] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0046.217] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0046.217] lstrlenW (lpString=".dbf") returned 4
	[0046.217] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0046.217] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0046.217] lstrlenW (lpString=".1cd") returned 4
	[0046.217] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0046.217] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0046.217] lstrlenW (lpString=".jpg") returned 4
	[0046.217] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0046.217] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0046.217] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0046.217] lstrlenW (lpString=".doc") returned 4
	[0046.217] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0046.217] lstrlenW (lpString=".docx") returned 5
	[0046.217] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0046.217] lstrlenW (lpString=".pdf") returned 4
	[0046.217] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0046.217] lstrlenW (lpString=".xls") returned 4
	[0046.217] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0046.217] lstrlenW (lpString=".xlsx") returned 5
	[0046.217] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0046.217] lstrlenW (lpString=".ppt") returned 4
	[0046.217] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0046.217] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0046.217] lstrlenW (lpString=".zip") returned 4
	[0046.217] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0046.218] lstrlenW (lpString=".rar") returned 4
	[0046.218] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0046.218] lstrlenW (lpString=".bz2") returned 4
	[0046.218] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0046.218] lstrlenW (lpString=".7z") returned 3
	[0046.218] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0046.218] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0046.218] lstrlenW (lpString=".dbf") returned 4
	[0046.218] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0046.218] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0046.218] lstrlenW (lpString=".1cd") returned 4
	[0046.218] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0046.218] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 78
	[0046.218] lstrlenW (lpString=".jpg") returned 4
	[0046.218] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0046.218] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0046.218] lstrlenW (lpString="InfLR.cab") returned 9
	[0046.218] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0046.218] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=18874884) returned 1
	[0046.219] CloseHandle (hObject=0x214) returned 1
	[0046.219] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab")) returned 0x2020
	[0046.219] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0046.219] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0046.219] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0046.219] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0046.219] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0046.219] ReadFile (in: hFile=0x214, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0046.529] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x6000ac, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0046.529] ReadFile (in: hFile=0x214, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0046.538] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0046.538] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x11c0204, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0046.538] ReadFile (in: hFile=0x214, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0046.555] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0046.555] WriteFile (in: hFile=0x214, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc00fe, lpOverlapped=0x0) returned 1
	[0046.567] SetEndOfFile (hFile=0x214) returned 1
	[0046.567] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d6d110
	[0046.570] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0046.570] WriteFile (in: hFile=0x214, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0046.572] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x6000ac, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0046.572] WriteFile (in: hFile=0x214, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0046.857] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x11c0204, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0046.857] WriteFile (in: hFile=0x214, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0046.861] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d6d110 | out: hHeap=0x5350000) returned 1
	[0047.124] CloseHandle (hObject=0x214) returned 1
	[0047.125] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0047.125] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0047.125] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0047.125] lstrlenW (lpString=".doc") returned 4
	[0047.125] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0047.125] lstrlenW (lpString=".docx") returned 5
	[0047.125] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0047.125] lstrlenW (lpString=".pdf") returned 4
	[0047.125] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0047.125] lstrlenW (lpString=".xls") returned 4
	[0047.125] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0047.125] lstrlenW (lpString=".xlsx") returned 5
	[0047.125] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0047.125] lstrlenW (lpString=".ppt") returned 4
	[0047.125] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0047.125] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0047.125] lstrlenW (lpString=".zip") returned 4
	[0047.125] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0047.125] lstrlenW (lpString=".rar") returned 4
	[0047.125] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0047.125] lstrlenW (lpString=".bz2") returned 4
	[0047.125] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0047.125] lstrlenW (lpString=".7z") returned 3
	[0047.125] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0047.125] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0047.126] lstrlenW (lpString=".dbf") returned 4
	[0047.126] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0047.126] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0047.126] lstrlenW (lpString=".1cd") returned 4
	[0047.126] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0047.126] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0047.126] lstrlenW (lpString=".jpg") returned 4
	[0047.126] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0047.126] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0047.126] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0047.126] lstrlenW (lpString=".doc") returned 4
	[0047.126] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0047.126] lstrlenW (lpString=".docx") returned 5
	[0047.126] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0047.126] lstrlenW (lpString=".pdf") returned 4
	[0047.126] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0047.126] lstrlenW (lpString=".xls") returned 4
	[0047.126] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0047.126] lstrlenW (lpString=".xlsx") returned 5
	[0047.126] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0047.126] lstrlenW (lpString=".ppt") returned 4
	[0047.126] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0047.126] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0047.126] lstrlenW (lpString=".zip") returned 4
	[0047.126] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0047.126] lstrlenW (lpString=".rar") returned 4
	[0047.126] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0047.126] lstrlenW (lpString=".bz2") returned 4
	[0047.126] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0047.126] lstrlenW (lpString=".7z") returned 3
	[0047.126] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0047.126] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0047.126] lstrlenW (lpString=".dbf") returned 4
	[0047.127] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0047.127] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0047.127] lstrlenW (lpString=".1cd") returned 4
	[0047.127] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0047.127] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 72
	[0047.127] lstrlenW (lpString=".jpg") returned 4
	[0047.127] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0047.127] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0047.127] lstrlenW (lpString="VisioLR.cab") returned 11
	[0047.127] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0047.127] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=50823389) returned 1
	[0047.127] CloseHandle (hObject=0x214) returned 1
	[0047.127] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab")) returned 0x2020
	[0047.127] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.128] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0047.128] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0047.128] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0047.128] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.128] ReadFile (in: hFile=0x214, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.135] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x1028049, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.135] ReadFile (in: hFile=0x214, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.140] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0047.140] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x30380dd, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.140] ReadFile (in: hFile=0x214, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.155] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.155] WriteFile (in: hFile=0x214, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc0102, lpOverlapped=0x0) returned 1
	[0047.532] SetEndOfFile (hFile=0x214) returned 1
	[0047.532] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8cb50d8
	[0047.536] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.536] WriteFile (in: hFile=0x214, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.537] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x1028049, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.537] WriteFile (in: hFile=0x214, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.538] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x30380dd, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.538] WriteFile (in: hFile=0x214, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.540] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb50d8 | out: hHeap=0x5350000) returned 1
	[0047.540] CloseHandle (hObject=0x214) returned 1
	[0047.540] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0047.540] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0047.540] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0047.540] lstrlenW (lpString=".doc") returned 4
	[0047.540] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0047.540] lstrlenW (lpString=".docx") returned 5
	[0047.540] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0047.540] lstrlenW (lpString=".pdf") returned 4
	[0047.540] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0047.540] lstrlenW (lpString=".xls") returned 4
	[0047.540] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0047.540] lstrlenW (lpString=".xlsx") returned 5
	[0047.540] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0047.541] lstrlenW (lpString=".ppt") returned 4
	[0047.541] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0047.541] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0047.541] lstrlenW (lpString=".zip") returned 4
	[0047.541] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0047.541] lstrlenW (lpString=".rar") returned 4
	[0047.541] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0047.541] lstrlenW (lpString=".bz2") returned 4
	[0047.541] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0047.541] lstrlenW (lpString=".7z") returned 3
	[0047.541] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0047.541] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0047.541] lstrlenW (lpString=".dbf") returned 4
	[0047.541] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0047.541] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0047.541] lstrlenW (lpString=".1cd") returned 4
	[0047.541] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0047.541] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0047.541] lstrlenW (lpString=".jpg") returned 4
	[0047.541] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0047.541] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0047.541] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0047.542] lstrlenW (lpString=".doc") returned 4
	[0047.542] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0047.542] lstrlenW (lpString=".docx") returned 5
	[0047.542] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0047.542] lstrlenW (lpString=".pdf") returned 4
	[0047.542] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0047.542] lstrlenW (lpString=".xls") returned 4
	[0047.542] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0047.542] lstrlenW (lpString=".xlsx") returned 5
	[0047.542] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0047.542] lstrlenW (lpString=".ppt") returned 4
	[0047.542] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0047.542] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0047.542] lstrlenW (lpString=".zip") returned 4
	[0047.542] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0047.542] lstrlenW (lpString=".rar") returned 4
	[0047.542] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0047.542] lstrlenW (lpString=".bz2") returned 4
	[0047.542] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0047.542] lstrlenW (lpString=".7z") returned 3
	[0047.542] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0047.542] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0047.542] lstrlenW (lpString=".dbf") returned 4
	[0047.542] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0047.542] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0047.542] lstrlenW (lpString=".1cd") returned 4
	[0047.542] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0047.542] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 74
	[0047.542] lstrlenW (lpString=".jpg") returned 4
	[0047.542] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0047.543] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0047.543] lstrlenW (lpString="ProjectMUI.msi") returned 14
	[0047.543] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0047.731] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=2511872) returned 1
	[0047.731] CloseHandle (hObject=0x1d8) returned 1
	[0047.732] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi")) returned 0x2020
	[0047.732] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.732] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0047.732] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0047.733] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0047.733] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.733] ReadFile (in: hFile=0x1d8, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.736] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcc6aa, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.737] ReadFile (in: hFile=0x1d8, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.747] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0047.747] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x225400, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.747] ReadFile (in: hFile=0x1d8, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.773] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0047.773] WriteFile (in: hFile=0x1d8, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc0108, lpOverlapped=0x0) returned 1
	[0047.789] SetEndOfFile (hFile=0x1d8) returned 1
	[0047.789] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d6d110
	[0047.873] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.873] WriteFile (in: hFile=0x1d8, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.875] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcc6aa, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.875] WriteFile (in: hFile=0x1d8, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.881] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x225400, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0047.881] WriteFile (in: hFile=0x1d8, lpBuffer=0x8d6d110*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d110*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0047.884] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d6d110 | out: hHeap=0x5350000) returned 1
	[0047.884] CloseHandle (hObject=0x1d8) returned 1
	[0047.884] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0047.884] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0047.884] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0047.884] lstrlenW (lpString=".doc") returned 4
	[0047.884] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0047.884] lstrlenW (lpString=".docx") returned 5
	[0047.884] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0047.884] lstrlenW (lpString=".pdf") returned 4
	[0047.884] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0047.884] lstrlenW (lpString=".xls") returned 4
	[0047.885] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0047.885] lstrlenW (lpString=".xlsx") returned 5
	[0047.885] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0047.885] lstrlenW (lpString=".ppt") returned 4
	[0047.885] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0047.885] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0047.885] lstrlenW (lpString=".zip") returned 4
	[0047.885] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0047.885] lstrlenW (lpString=".rar") returned 4
	[0047.885] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0047.885] lstrlenW (lpString=".bz2") returned 4
	[0047.885] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0047.885] lstrlenW (lpString=".7z") returned 3
	[0047.885] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0047.885] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0047.885] lstrlenW (lpString=".dbf") returned 4
	[0047.885] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0047.885] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0047.885] lstrlenW (lpString=".1cd") returned 4
	[0047.885] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0047.885] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0047.885] lstrlenW (lpString=".jpg") returned 4
	[0047.885] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0047.885] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0047.885] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0047.885] lstrlenW (lpString=".doc") returned 4
	[0047.885] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0047.885] lstrlenW (lpString=".docx") returned 5
	[0047.885] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0047.885] lstrlenW (lpString=".pdf") returned 4
	[0047.885] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0047.885] lstrlenW (lpString=".xls") returned 4
	[0047.886] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0047.886] lstrlenW (lpString=".xlsx") returned 5
	[0047.886] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0047.886] lstrlenW (lpString=".ppt") returned 4
	[0047.886] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0047.886] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0047.886] lstrlenW (lpString=".zip") returned 4
	[0047.886] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0047.886] lstrlenW (lpString=".rar") returned 4
	[0047.886] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0047.886] lstrlenW (lpString=".bz2") returned 4
	[0047.886] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0047.886] lstrlenW (lpString=".7z") returned 3
	[0047.886] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0047.886] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0047.886] lstrlenW (lpString=".dbf") returned 4
	[0047.886] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0047.886] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0047.886] lstrlenW (lpString=".1cd") returned 4
	[0047.886] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0047.886] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 77
	[0047.886] lstrlenW (lpString=".jpg") returned 4
	[0047.886] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0047.886] lstrcmpiW (lpString1=".msi", lpString2=".beets") returned 1
	[0047.886] lstrlenW (lpString="GrooveMUI.msi") returned 13
	[0047.886] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0047.887] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=2507776) returned 1
	[0047.887] CloseHandle (hObject=0x1d8) returned 1
	[0047.887] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi")) returned 0x2020
	[0047.887] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0047.887] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0047.897] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8
	[0047.897] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0047.897] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.897] ReadFile (in: hFile=0x1d8, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0047.911] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcc155, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0047.911] ReadFile (in: hFile=0x1d8, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0048.182] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0048.182] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x224400, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0048.182] ReadFile (in: hFile=0x1d8, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0048.198] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0048.198] WriteFile (in: hFile=0x1d8, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc0106, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc0106, lpOverlapped=0x0) returned 1
	[0048.313] SetEndOfFile (hFile=0x1d8) returned 1
	[0048.313] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8cb50d8
	[0048.317] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0048.317] WriteFile (in: hFile=0x1d8, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0048.319] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcc155, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0048.319] WriteFile (in: hFile=0x1d8, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0048.325] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x224400, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0048.325] WriteFile (in: hFile=0x1d8, lpBuffer=0x8cb50d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8cb50d8*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0048.328] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8cb50d8 | out: hHeap=0x5350000) returned 1
	[0048.328] CloseHandle (hObject=0x1d8) returned 1
	[0048.328] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0048.329] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76
	[0048.329] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76
	[0048.329] lstrlenW (lpString=".doc") returned 4
	[0048.329] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0048.329] lstrlenW (lpString=".docx") returned 5
	[0048.329] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0048.329] lstrlenW (lpString=".pdf") returned 4
	[0048.329] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0048.329] lstrlenW (lpString=".xls") returned 4
	[0048.329] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0048.329] lstrlenW (lpString=".xlsx") returned 5
	[0048.329] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0048.329] lstrlenW (lpString=".ppt") returned 4
	[0048.329] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0048.329] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76
	[0048.329] lstrlenW (lpString=".zip") returned 4
	[0048.329] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0048.329] lstrlenW (lpString=".rar") returned 4
	[0048.329] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0048.329] lstrlenW (lpString=".bz2") returned 4
	[0048.329] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0048.329] lstrlenW (lpString=".7z") returned 3
	[0048.329] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0048.329] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76
	[0048.329] lstrlenW (lpString=".dbf") returned 4
	[0048.329] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0048.329] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76
	[0048.329] lstrlenW (lpString=".1cd") returned 4
	[0048.329] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0048.329] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76
	[0048.329] lstrlenW (lpString=".jpg") returned 4
	[0048.329] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0048.330] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76
	[0048.330] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76
	[0048.330] lstrlenW (lpString=".doc") returned 4
	[0048.330] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0048.330] lstrlenW (lpString=".docx") returned 5
	[0048.330] lstrcmpiW (lpString1=".docx", lpString2="I.msi") returned -1
	[0048.330] lstrlenW (lpString=".pdf") returned 4
	[0048.330] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0048.330] lstrlenW (lpString=".xls") returned 4
	[0048.330] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0048.330] lstrlenW (lpString=".xlsx") returned 5
	[0048.330] lstrcmpiW (lpString1=".xlsx", lpString2="I.msi") returned -1
	[0048.330] lstrlenW (lpString=".ppt") returned 4
	[0048.330] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0048.330] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76
	[0048.330] lstrlenW (lpString=".zip") returned 4
	[0048.330] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0048.330] lstrlenW (lpString=".rar") returned 4
	[0048.330] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0048.330] lstrlenW (lpString=".bz2") returned 4
	[0048.330] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0048.330] lstrlenW (lpString=".7z") returned 3
	[0048.330] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0048.330] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76
	[0048.330] lstrlenW (lpString=".dbf") returned 4
	[0048.330] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0048.330] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76
	[0048.330] lstrlenW (lpString=".1cd") returned 4
	[0048.330] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0048.330] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 76
	[0048.330] lstrlenW (lpString=".jpg") returned 4
	[0048.330] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0048.331] lstrcmpiW (lpString1=".manifest", lpString2=".beets") returned 1
	[0048.331] lstrlenW (lpString="Microsoft.VC90.CRT.manifest") returned 27
	[0048.331] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0049.268] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=1857) returned 1
	[0049.268] CloseHandle (hObject=0x1f8) returned 1
	[0049.268] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest")) returned 0x2020
	[0049.268] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.268] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0049.268] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.268] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.268] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0049.269] GetLastError () returned 0x0
	[0049.269] ReadFile (in: hFile=0x1f8, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x741, lpOverlapped=0x0) returned 1
	[0049.319] WriteFile (in: hFile=0x1e0, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0x750, lpOverlapped=0x0) returned 1
	[0049.320] ReadFile (in: hFile=0x1f8, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0049.320] WriteFile (in: hFile=0x1e0, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0x10a, lpOverlapped=0x0) returned 1
	[0049.321] SetEndOfFile (hFile=0x1e0) returned 1
	[0049.321] CloseHandle (hObject=0x1e0) returned 1
	[0049.321] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0049.321] SetEndOfFile (hFile=0x1f8) returned 1
	[0049.322] CloseHandle (hObject=0x1f8) returned 1
	[0049.322] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0049.322] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest")) returned 1
	[0049.322] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90
	[0049.322] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90
	[0049.322] lstrlenW (lpString=".doc") returned 4
	[0049.322] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1
	[0049.322] lstrlenW (lpString=".docx") returned 5
	[0049.322] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1
	[0049.322] lstrlenW (lpString=".pdf") returned 4
	[0049.322] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1
	[0049.322] lstrlenW (lpString=".xls") returned 4
	[0049.322] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1
	[0049.322] lstrlenW (lpString=".xlsx") returned 5
	[0049.322] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1
	[0049.323] lstrlenW (lpString=".ppt") returned 4
	[0049.323] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1
	[0049.323] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90
	[0049.323] lstrlenW (lpString=".zip") returned 4
	[0049.323] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1
	[0049.323] lstrlenW (lpString=".rar") returned 4
	[0049.323] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1
	[0049.323] lstrlenW (lpString=".bz2") returned 4
	[0049.323] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1
	[0049.323] lstrlenW (lpString=".7z") returned 3
	[0049.323] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1
	[0049.323] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90
	[0049.323] lstrlenW (lpString=".dbf") returned 4
	[0049.323] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1
	[0049.323] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90
	[0049.323] lstrlenW (lpString=".1cd") returned 4
	[0049.323] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1
	[0049.323] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90
	[0049.323] lstrlenW (lpString=".jpg") returned 4
	[0049.323] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1
	[0049.323] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90
	[0049.323] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90
	[0049.323] lstrlenW (lpString=".doc") returned 4
	[0049.323] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1
	[0049.323] lstrlenW (lpString=".docx") returned 5
	[0049.323] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1
	[0049.323] lstrlenW (lpString=".pdf") returned 4
	[0049.323] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1
	[0049.323] lstrlenW (lpString=".xls") returned 4
	[0049.323] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1
	[0049.323] lstrlenW (lpString=".xlsx") returned 5
	[0049.323] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1
	[0049.324] lstrlenW (lpString=".ppt") returned 4
	[0049.324] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1
	[0049.324] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90
	[0049.324] lstrlenW (lpString=".zip") returned 4
	[0049.324] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1
	[0049.324] lstrlenW (lpString=".rar") returned 4
	[0049.324] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1
	[0049.324] lstrlenW (lpString=".bz2") returned 4
	[0049.324] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1
	[0049.324] lstrlenW (lpString=".7z") returned 3
	[0049.324] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1
	[0049.324] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90
	[0049.324] lstrlenW (lpString=".dbf") returned 4
	[0049.324] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1
	[0049.324] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90
	[0049.324] lstrlenW (lpString=".1cd") returned 4
	[0049.324] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1
	[0049.324] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 90
	[0049.324] lstrlenW (lpString=".jpg") returned 4
	[0049.324] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1
	[0049.324] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0049.324] lstrlenW (lpString="AccLR.cab") returned 9
	[0049.324] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0049.325] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=28016276) returned 1
	[0049.325] CloseHandle (hObject=0x1f8) returned 1
	[0049.325] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab")) returned 0x2020
	[0049.325] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0049.325] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0049.325] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0049.325] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0049.326] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0049.326] ReadFile (in: hFile=0x1f8, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0049.356] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x8e7f86, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0049.356] ReadFile (in: hFile=0x1f8, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0049.388] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0049.388] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x1a77e94, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0049.388] ReadFile (in: hFile=0x1f8, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.225] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.225] WriteFile (in: hFile=0x1f8, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc00fe, lpOverlapped=0x0) returned 1
	[0050.257] SetEndOfFile (hFile=0x1f8) returned 1
	[0050.258] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d2d108
	[0050.262] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.262] WriteFile (in: hFile=0x1f8, lpBuffer=0x8d2d108*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d2d108*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.263] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x8e7f86, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.263] WriteFile (in: hFile=0x1f8, lpBuffer=0x8d2d108*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d2d108*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.265] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x1a77e94, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.265] WriteFile (in: hFile=0x1f8, lpBuffer=0x8d2d108*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d2d108*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.267] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d2d108 | out: hHeap=0x5350000) returned 1
	[0050.267] CloseHandle (hObject=0x1f8) returned 1
	[0050.268] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0050.268] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85
	[0050.268] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85
	[0050.268] lstrlenW (lpString=".doc") returned 4
	[0050.268] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0050.268] lstrlenW (lpString=".docx") returned 5
	[0050.268] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0050.268] lstrlenW (lpString=".pdf") returned 4
	[0050.268] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0050.268] lstrlenW (lpString=".xls") returned 4
	[0050.268] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0050.268] lstrlenW (lpString=".xlsx") returned 5
	[0050.268] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0050.268] lstrlenW (lpString=".ppt") returned 4
	[0050.268] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0050.268] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85
	[0050.268] lstrlenW (lpString=".zip") returned 4
	[0050.268] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0050.269] lstrlenW (lpString=".rar") returned 4
	[0050.269] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0050.269] lstrlenW (lpString=".bz2") returned 4
	[0050.269] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0050.269] lstrlenW (lpString=".7z") returned 3
	[0050.269] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0050.269] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85
	[0050.269] lstrlenW (lpString=".dbf") returned 4
	[0050.269] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0050.269] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85
	[0050.269] lstrlenW (lpString=".1cd") returned 4
	[0050.269] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0050.269] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85
	[0050.269] lstrlenW (lpString=".jpg") returned 4
	[0050.269] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0050.269] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85
	[0050.269] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85
	[0050.269] lstrlenW (lpString=".doc") returned 4
	[0050.269] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0050.269] lstrlenW (lpString=".docx") returned 5
	[0050.269] lstrcmpiW (lpString1=".docx", lpString2="R.cab") returned -1
	[0050.269] lstrlenW (lpString=".pdf") returned 4
	[0050.269] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0050.269] lstrlenW (lpString=".xls") returned 4
	[0050.269] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0050.269] lstrlenW (lpString=".xlsx") returned 5
	[0050.269] lstrcmpiW (lpString1=".xlsx", lpString2="R.cab") returned -1
	[0050.269] lstrlenW (lpString=".ppt") returned 4
	[0050.269] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0050.269] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85
	[0050.269] lstrlenW (lpString=".zip") returned 4
	[0050.269] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0050.269] lstrlenW (lpString=".rar") returned 4
	[0050.270] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0050.270] lstrlenW (lpString=".bz2") returned 4
	[0050.270] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0050.270] lstrlenW (lpString=".7z") returned 3
	[0050.270] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0050.270] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85
	[0050.270] lstrlenW (lpString=".dbf") returned 4
	[0050.270] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0050.270] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85
	[0050.270] lstrlenW (lpString=".1cd") returned 4
	[0050.270] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0050.270] lstrlenW (lpString="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 85
	[0050.270] lstrlenW (lpString=".jpg") returned 4
	[0050.270] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0050.491] lstrcmpiW (lpString1=".exe", lpString2=".beets") returned 1
	[0050.491] lstrlenW (lpString="ose.exe") returned 7
	[0050.491] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0050.491] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=174440) returned 1
	[0050.491] CloseHandle (hObject=0x1e0) returned 1
	[0050.491] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 0x2020
	[0050.491] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.491] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0050.491] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.491] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.491] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0050.492] GetLastError () returned 0x0
	[0050.492] ReadFile (in: hFile=0x1e0, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x2a968, lpOverlapped=0x0) returned 1
	[0050.512] WriteFile (in: hFile=0x1ac, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0x2a970, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0x2a970, lpOverlapped=0x0) returned 1
	[0050.515] ReadFile (in: hFile=0x1e0, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0050.515] WriteFile (in: hFile=0x1ac, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xe2, lpOverlapped=0x0) returned 1
	[0050.515] SetEndOfFile (hFile=0x1ac) returned 1
	[0050.516] CloseHandle (hObject=0x1ac) returned 1
	[0050.516] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.516] SetEndOfFile (hFile=0x1e0) returned 1
	[0050.518] CloseHandle (hObject=0x1e0) returned 1
	[0050.518] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0050.518] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 1
	[0050.518] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0050.518] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0050.518] lstrlenW (lpString=".doc") returned 4
	[0050.518] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0050.518] lstrlenW (lpString=".docx") returned 5
	[0050.518] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0050.518] lstrlenW (lpString=".pdf") returned 4
	[0050.518] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0050.518] lstrlenW (lpString=".xls") returned 4
	[0050.518] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0050.518] lstrlenW (lpString=".xlsx") returned 5
	[0050.518] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0050.518] lstrlenW (lpString=".ppt") returned 4
	[0050.518] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0050.518] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0050.518] lstrlenW (lpString=".zip") returned 4
	[0050.519] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0050.519] lstrlenW (lpString=".rar") returned 4
	[0050.519] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0050.519] lstrlenW (lpString=".bz2") returned 4
	[0050.519] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0050.519] lstrlenW (lpString=".7z") returned 3
	[0050.519] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0050.519] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0050.519] lstrlenW (lpString=".dbf") returned 4
	[0050.519] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0050.519] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0050.519] lstrlenW (lpString=".1cd") returned 4
	[0050.519] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0050.519] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0050.519] lstrlenW (lpString=".jpg") returned 4
	[0050.519] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0050.519] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0050.519] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0050.519] lstrlenW (lpString=".doc") returned 4
	[0050.519] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0050.519] lstrlenW (lpString=".docx") returned 5
	[0050.519] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0050.519] lstrlenW (lpString=".pdf") returned 4
	[0050.519] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0050.519] lstrlenW (lpString=".xls") returned 4
	[0050.519] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0050.519] lstrlenW (lpString=".xlsx") returned 5
	[0050.519] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0050.519] lstrlenW (lpString=".ppt") returned 4
	[0050.519] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0050.519] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0050.520] lstrlenW (lpString=".zip") returned 4
	[0050.520] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0050.520] lstrlenW (lpString=".rar") returned 4
	[0050.520] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0050.520] lstrlenW (lpString=".bz2") returned 4
	[0050.520] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0050.520] lstrlenW (lpString=".7z") returned 3
	[0050.520] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0050.520] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0050.520] lstrlenW (lpString=".dbf") returned 4
	[0050.520] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0050.520] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0050.520] lstrlenW (lpString=".1cd") returned 4
	[0050.520] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0050.520] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0050.520] lstrlenW (lpString=".jpg") returned 4
	[0050.520] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0050.520] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0050.520] lstrlenW (lpString="OWOW32WW.cab") returned 12
	[0050.520] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0050.521] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=36233052) returned 1
	[0050.521] CloseHandle (hObject=0x1e0) returned 1
	[0050.521] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab")) returned 0x2020
	[0050.521] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.521] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0050.521] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0050.521] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0050.521] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.521] ReadFile (in: hFile=0x1e0, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.564] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.564] ReadFile (in: hFile=0x1e0, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.584] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0050.584] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.584] ReadFile (in: hFile=0x1e0, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.608] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0050.608] WriteFile (in: hFile=0x1e0, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0050.893] SetEndOfFile (hFile=0x1e0) returned 1
	[0050.958] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d1d100
	[0050.958] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.958] WriteFile (in: hFile=0x1e0, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.959] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.959] WriteFile (in: hFile=0x1e0, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.960] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0050.960] WriteFile (in: hFile=0x1e0, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0050.962] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d1d100 | out: hHeap=0x5350000) returned 1
	[0050.962] CloseHandle (hObject=0x1e0) returned 1
	[0050.962] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0050.962] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0050.962] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0050.962] lstrlenW (lpString=".doc") returned 4
	[0050.963] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0050.963] lstrlenW (lpString=".docx") returned 5
	[0050.963] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1
	[0050.963] lstrlenW (lpString=".pdf") returned 4
	[0050.963] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0050.963] lstrlenW (lpString=".xls") returned 4
	[0050.963] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0050.963] lstrlenW (lpString=".xlsx") returned 5
	[0050.963] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1
	[0050.963] lstrlenW (lpString=".ppt") returned 4
	[0050.963] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0050.963] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0050.963] lstrlenW (lpString=".zip") returned 4
	[0050.963] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0050.963] lstrlenW (lpString=".rar") returned 4
	[0050.963] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0050.963] lstrlenW (lpString=".bz2") returned 4
	[0050.963] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0050.963] lstrlenW (lpString=".7z") returned 3
	[0050.963] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0050.963] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0050.963] lstrlenW (lpString=".dbf") returned 4
	[0050.963] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0050.963] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0050.963] lstrlenW (lpString=".1cd") returned 4
	[0050.963] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0050.963] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0050.963] lstrlenW (lpString=".jpg") returned 4
	[0050.963] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0050.963] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0050.963] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0050.964] lstrlenW (lpString=".doc") returned 4
	[0050.964] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0050.964] lstrlenW (lpString=".docx") returned 5
	[0050.964] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1
	[0050.964] lstrlenW (lpString=".pdf") returned 4
	[0050.964] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0050.964] lstrlenW (lpString=".xls") returned 4
	[0050.964] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0050.964] lstrlenW (lpString=".xlsx") returned 5
	[0050.964] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1
	[0050.964] lstrlenW (lpString=".ppt") returned 4
	[0050.964] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0050.964] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0050.964] lstrlenW (lpString=".zip") returned 4
	[0050.964] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0050.964] lstrlenW (lpString=".rar") returned 4
	[0050.964] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0050.964] lstrlenW (lpString=".bz2") returned 4
	[0050.964] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0050.964] lstrlenW (lpString=".7z") returned 3
	[0050.964] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0050.964] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0050.964] lstrlenW (lpString=".dbf") returned 4
	[0050.964] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0050.964] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0050.964] lstrlenW (lpString=".1cd") returned 4
	[0050.964] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0050.964] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0050.964] lstrlenW (lpString=".jpg") returned 4
	[0050.964] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0050.967] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0050.967] lstrlenW (lpString="ProPrWW2.cab") returned 12
	[0050.967] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0050.967] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=222948913) returned 1
	[0050.967] CloseHandle (hObject=0x1e0) returned 1
	[0050.967] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab")) returned 0x2020
	[0050.967] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0050.968] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0050.968] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0050.968] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0050.968] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.968] ReadFile (in: hFile=0x1e0, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0050.989] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x46dfa10, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0050.989] ReadFile (in: hFile=0x1e0, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.022] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0051.022] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0xd45ee31, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.022] ReadFile (in: hFile=0x1e0, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.046] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.046] WriteFile (in: hFile=0x1e0, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0051.361] SetEndOfFile (hFile=0x1e0) returned 1
	[0051.361] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d7d118
	[0051.365] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.365] WriteFile (in: hFile=0x1e0, lpBuffer=0x8d7d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d7d118*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.366] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x46dfa10, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.366] WriteFile (in: hFile=0x1e0, lpBuffer=0x8d7d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d7d118*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.368] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0xd45ee31, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.369] WriteFile (in: hFile=0x1e0, lpBuffer=0x8d7d118*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d7d118*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.370] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d7d118 | out: hHeap=0x5350000) returned 1
	[0051.371] CloseHandle (hObject=0x1e0) returned 1
	[0051.371] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0051.371] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75
	[0051.371] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75
	[0051.371] lstrlenW (lpString=".doc") returned 4
	[0051.371] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0051.371] lstrlenW (lpString=".docx") returned 5
	[0051.371] lstrcmpiW (lpString1=".docx", lpString2="2.cab") returned -1
	[0051.371] lstrlenW (lpString=".pdf") returned 4
	[0051.371] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0051.371] lstrlenW (lpString=".xls") returned 4
	[0051.371] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0051.371] lstrlenW (lpString=".xlsx") returned 5
	[0051.371] lstrcmpiW (lpString1=".xlsx", lpString2="2.cab") returned -1
	[0051.371] lstrlenW (lpString=".ppt") returned 4
	[0051.371] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0051.371] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75
	[0051.371] lstrlenW (lpString=".zip") returned 4
	[0051.372] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0051.372] lstrlenW (lpString=".rar") returned 4
	[0051.372] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0051.372] lstrlenW (lpString=".bz2") returned 4
	[0051.372] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0051.372] lstrlenW (lpString=".7z") returned 3
	[0051.372] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0051.372] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75
	[0051.372] lstrlenW (lpString=".dbf") returned 4
	[0051.372] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0051.372] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75
	[0051.372] lstrlenW (lpString=".1cd") returned 4
	[0051.372] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0051.372] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75
	[0051.372] lstrlenW (lpString=".jpg") returned 4
	[0051.372] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0051.372] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75
	[0051.372] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75
	[0051.372] lstrlenW (lpString=".doc") returned 4
	[0051.372] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0051.372] lstrlenW (lpString=".docx") returned 5
	[0051.372] lstrcmpiW (lpString1=".docx", lpString2="2.cab") returned -1
	[0051.372] lstrlenW (lpString=".pdf") returned 4
	[0051.372] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0051.372] lstrlenW (lpString=".xls") returned 4
	[0051.372] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0051.372] lstrlenW (lpString=".xlsx") returned 5
	[0051.372] lstrcmpiW (lpString1=".xlsx", lpString2="2.cab") returned -1
	[0051.372] lstrlenW (lpString=".ppt") returned 4
	[0051.372] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0051.372] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75
	[0051.372] lstrlenW (lpString=".zip") returned 4
	[0051.373] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0051.373] lstrlenW (lpString=".rar") returned 4
	[0051.373] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0051.373] lstrlenW (lpString=".bz2") returned 4
	[0051.373] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0051.373] lstrlenW (lpString=".7z") returned 3
	[0051.373] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0051.373] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75
	[0051.373] lstrlenW (lpString=".dbf") returned 4
	[0051.373] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0051.373] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75
	[0051.373] lstrlenW (lpString=".1cd") returned 4
	[0051.373] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0051.373] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 75
	[0051.373] lstrlenW (lpString=".jpg") returned 4
	[0051.373] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0051.373] lstrcmpiW (lpString1=".exe", lpString2=".beets") returned 1
	[0051.373] lstrlenW (lpString="ose.exe") returned 7
	[0051.373] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.374] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=174440) returned 1
	[0051.374] CloseHandle (hObject=0x1e0) returned 1
	[0051.374] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 0x2020
	[0051.374] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.374] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0051.374] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.374] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.374] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0051.374] GetLastError () returned 0x0
	[0051.374] ReadFile (in: hFile=0x1e0, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x2a968, lpOverlapped=0x0) returned 1
	[0051.414] WriteFile (in: hFile=0x210, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0x2a970, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0x2a970, lpOverlapped=0x0) returned 1
	[0051.417] ReadFile (in: hFile=0x1e0, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0051.417] WriteFile (in: hFile=0x210, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xe2, lpOverlapped=0x0) returned 1
	[0051.417] SetEndOfFile (hFile=0x210) returned 1
	[0051.417] CloseHandle (hObject=0x210) returned 1
	[0051.417] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.417] SetEndOfFile (hFile=0x1e0) returned 1
	[0051.419] CloseHandle (hObject=0x1e0) returned 1
	[0051.419] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0051.419] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 1
	[0051.419] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0051.419] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0051.419] lstrlenW (lpString=".doc") returned 4
	[0051.419] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0051.419] lstrlenW (lpString=".docx") returned 5
	[0051.419] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0051.420] lstrlenW (lpString=".pdf") returned 4
	[0051.420] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0051.420] lstrlenW (lpString=".xls") returned 4
	[0051.420] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0051.420] lstrlenW (lpString=".xlsx") returned 5
	[0051.420] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0051.420] lstrlenW (lpString=".ppt") returned 4
	[0051.420] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0051.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0051.420] lstrlenW (lpString=".zip") returned 4
	[0051.420] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0051.420] lstrlenW (lpString=".rar") returned 4
	[0051.420] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0051.420] lstrlenW (lpString=".bz2") returned 4
	[0051.420] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0051.420] lstrlenW (lpString=".7z") returned 3
	[0051.420] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0051.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0051.420] lstrlenW (lpString=".dbf") returned 4
	[0051.420] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0051.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0051.420] lstrlenW (lpString=".1cd") returned 4
	[0051.420] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0051.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0051.420] lstrlenW (lpString=".jpg") returned 4
	[0051.420] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0051.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0051.420] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0051.420] lstrlenW (lpString=".doc") returned 4
	[0051.420] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0051.420] lstrlenW (lpString=".docx") returned 5
	[0051.420] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0051.421] lstrlenW (lpString=".pdf") returned 4
	[0051.421] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0051.421] lstrlenW (lpString=".xls") returned 4
	[0051.421] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0051.421] lstrlenW (lpString=".xlsx") returned 5
	[0051.421] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0051.421] lstrlenW (lpString=".ppt") returned 4
	[0051.421] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0051.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0051.421] lstrlenW (lpString=".zip") returned 4
	[0051.421] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0051.421] lstrlenW (lpString=".rar") returned 4
	[0051.421] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0051.421] lstrlenW (lpString=".bz2") returned 4
	[0051.421] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0051.421] lstrlenW (lpString=".7z") returned 3
	[0051.421] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0051.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0051.421] lstrlenW (lpString=".dbf") returned 4
	[0051.421] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0051.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0051.421] lstrlenW (lpString=".1cd") returned 4
	[0051.421] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0051.421] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 70
	[0051.421] lstrlenW (lpString=".jpg") returned 4
	[0051.421] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0051.421] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0051.421] lstrlenW (lpString="OWOW32WW.cab") returned 12
	[0051.422] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0051.591] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=36233052) returned 1
	[0051.591] CloseHandle (hObject=0x20c) returned 1
	[0051.591] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab")) returned 0x2020
	[0051.591] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.591] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0051.592] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0051.592] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0051.592] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.592] ReadFile (in: hFile=0x20c, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.639] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.639] ReadFile (in: hFile=0x20c, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.672] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0051.672] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.672] ReadFile (in: hFile=0x20c, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.731] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0051.731] WriteFile (in: hFile=0x20c, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0051.750] SetEndOfFile (hFile=0x20c) returned 1
	[0051.779] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d1d100
	[0051.780] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.780] WriteFile (in: hFile=0x20c, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.780] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.780] WriteFile (in: hFile=0x20c, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.781] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0051.781] WriteFile (in: hFile=0x20c, lpBuffer=0x8d1d100*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d1d100*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0051.783] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d1d100 | out: hHeap=0x5350000) returned 1
	[0051.783] CloseHandle (hObject=0x20c) returned 1
	[0051.784] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0051.784] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0051.784] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0051.784] lstrlenW (lpString=".doc") returned 4
	[0051.784] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0051.784] lstrlenW (lpString=".docx") returned 5
	[0051.784] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1
	[0051.784] lstrlenW (lpString=".pdf") returned 4
	[0051.784] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0051.784] lstrlenW (lpString=".xls") returned 4
	[0051.784] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0051.784] lstrlenW (lpString=".xlsx") returned 5
	[0051.784] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1
	[0051.784] lstrlenW (lpString=".ppt") returned 4
	[0051.784] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0051.784] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0051.784] lstrlenW (lpString=".zip") returned 4
	[0051.784] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0051.785] lstrlenW (lpString=".rar") returned 4
	[0051.785] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0051.785] lstrlenW (lpString=".bz2") returned 4
	[0051.785] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0051.785] lstrlenW (lpString=".7z") returned 3
	[0051.785] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0051.785] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0051.785] lstrlenW (lpString=".dbf") returned 4
	[0051.785] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0051.785] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0051.785] lstrlenW (lpString=".1cd") returned 4
	[0051.785] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0051.785] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0051.785] lstrlenW (lpString=".jpg") returned 4
	[0051.785] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0051.785] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0051.785] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0051.785] lstrlenW (lpString=".doc") returned 4
	[0051.785] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0051.785] lstrlenW (lpString=".docx") returned 5
	[0051.785] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1
	[0051.785] lstrlenW (lpString=".pdf") returned 4
	[0051.785] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0051.785] lstrlenW (lpString=".xls") returned 4
	[0051.785] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0051.785] lstrlenW (lpString=".xlsx") returned 5
	[0051.785] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1
	[0051.785] lstrlenW (lpString=".ppt") returned 4
	[0051.785] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0051.785] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0051.785] lstrlenW (lpString=".zip") returned 4
	[0051.785] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0051.786] lstrlenW (lpString=".rar") returned 4
	[0051.786] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0051.786] lstrlenW (lpString=".bz2") returned 4
	[0051.786] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0051.786] lstrlenW (lpString=".7z") returned 3
	[0051.786] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0051.786] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0051.786] lstrlenW (lpString=".dbf") returned 4
	[0051.786] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0051.786] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0051.786] lstrlenW (lpString=".1cd") returned 4
	[0051.786] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0051.786] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 75
	[0051.786] lstrlenW (lpString=".jpg") returned 4
	[0051.786] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0051.786] lstrcmpiW (lpString1=".cab", lpString2=".beets") returned 1
	[0051.786] lstrlenW (lpString="PrjPrrWW.cab") returned 12
	[0051.786] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0051.921] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=162970271) returned 1
	[0051.921] CloseHandle (hObject=0x20c) returned 1
	[0051.921] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab")) returned 0x2020
	[0051.921] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0051.921] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0051.922] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0051.922] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0051.922] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.922] ReadFile (in: hFile=0x20c, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.940] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x33ce8df, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.940] ReadFile (in: hFile=0x20c, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0051.989] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0051.989] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x9b2ba9f, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0051.989] ReadFile (in: hFile=0x20c, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0052.018] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.093] WriteFile (in: hFile=0x20c, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc0104, lpOverlapped=0x0) returned 1
	[0052.510] SetEndOfFile (hFile=0x20c) returned 1
	[0052.510] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d5d108
	[0052.514] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0052.514] WriteFile (in: hFile=0x20c, lpBuffer=0x8d5d108*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d108*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0052.515] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x33ce8df, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0052.515] WriteFile (in: hFile=0x20c, lpBuffer=0x8d5d108*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d108*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0052.518] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x9b2ba9f, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0052.518] WriteFile (in: hFile=0x20c, lpBuffer=0x8d5d108*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d5d108*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0052.520] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d5d108 | out: hHeap=0x5350000) returned 1
	[0052.520] CloseHandle (hObject=0x20c) returned 1
	[0052.520] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0052.521] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0052.521] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0052.521] lstrlenW (lpString=".doc") returned 4
	[0052.521] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0052.521] lstrlenW (lpString=".docx") returned 5
	[0052.521] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1
	[0052.521] lstrlenW (lpString=".pdf") returned 4
	[0052.521] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0052.521] lstrlenW (lpString=".xls") returned 4
	[0052.521] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0052.521] lstrlenW (lpString=".xlsx") returned 5
	[0052.521] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1
	[0052.521] lstrlenW (lpString=".ppt") returned 4
	[0052.521] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0052.521] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0052.521] lstrlenW (lpString=".zip") returned 4
	[0052.521] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0052.521] lstrlenW (lpString=".rar") returned 4
	[0052.521] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0052.521] lstrlenW (lpString=".bz2") returned 4
	[0052.521] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0052.521] lstrlenW (lpString=".7z") returned 3
	[0052.521] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0052.521] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0052.521] lstrlenW (lpString=".dbf") returned 4
	[0052.521] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0052.522] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0052.522] lstrlenW (lpString=".1cd") returned 4
	[0052.522] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0052.522] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0052.522] lstrlenW (lpString=".jpg") returned 4
	[0052.522] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0052.522] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0052.522] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0052.522] lstrlenW (lpString=".doc") returned 4
	[0052.522] lstrcmpiW (lpString1=".doc", lpString2=".cab") returned 1
	[0052.522] lstrlenW (lpString=".docx") returned 5
	[0052.522] lstrcmpiW (lpString1=".docx", lpString2="W.cab") returned -1
	[0052.522] lstrlenW (lpString=".pdf") returned 4
	[0052.522] lstrcmpiW (lpString1=".pdf", lpString2=".cab") returned 1
	[0052.522] lstrlenW (lpString=".xls") returned 4
	[0052.522] lstrcmpiW (lpString1=".xls", lpString2=".cab") returned 1
	[0052.522] lstrlenW (lpString=".xlsx") returned 5
	[0052.522] lstrcmpiW (lpString1=".xlsx", lpString2="W.cab") returned -1
	[0052.522] lstrlenW (lpString=".ppt") returned 4
	[0052.522] lstrcmpiW (lpString1=".ppt", lpString2=".cab") returned 1
	[0052.522] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0052.522] lstrlenW (lpString=".zip") returned 4
	[0052.522] lstrcmpiW (lpString1=".zip", lpString2=".cab") returned 1
	[0052.522] lstrlenW (lpString=".rar") returned 4
	[0052.522] lstrcmpiW (lpString1=".rar", lpString2=".cab") returned 1
	[0052.522] lstrlenW (lpString=".bz2") returned 4
	[0052.522] lstrcmpiW (lpString1=".bz2", lpString2=".cab") returned -1
	[0052.522] lstrlenW (lpString=".7z") returned 3
	[0052.522] lstrcmpiW (lpString1=".7z", lpString2="cab") returned -1
	[0052.522] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0052.522] lstrlenW (lpString=".dbf") returned 4
	[0052.522] lstrcmpiW (lpString1=".dbf", lpString2=".cab") returned 1
	[0052.522] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0052.523] lstrlenW (lpString=".1cd") returned 4
	[0052.523] lstrcmpiW (lpString1=".1cd", lpString2=".cab") returned -1
	[0052.523] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 75
	[0052.523] lstrlenW (lpString=".jpg") returned 4
	[0052.523] lstrcmpiW (lpString1=".jpg", lpString2=".cab") returned 1
	[0052.523] lstrcmpiW (lpString1=".exe", lpString2=".beets") returned 1
	[0052.523] lstrlenW (lpString="setup.exe") returned 9
	[0052.523] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0052.523] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=1377656) returned 1
	[0052.523] CloseHandle (hObject=0x20c) returned 1
	[0052.523] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 0x2020
	[0052.523] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0052.523] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0052.523] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.524] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0052.524] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0053.144] GetLastError () returned 0x0
	[0053.144] ReadFile (in: hFile=0x20c, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xffff0, lpOverlapped=0x0) returned 1
	[0053.355] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xffff0, lpOverlapped=0x0) returned 1
	[0053.372] ReadFile (in: hFile=0x20c, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x50588, lpOverlapped=0x0) returned 1
	[0053.673] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0x50590, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0x50590, lpOverlapped=0x0) returned 1
	[0053.683] ReadFile (in: hFile=0x20c, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0053.683] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0053.683] SetEndOfFile (hFile=0x220) returned 1
	[0053.683] CloseHandle (hObject=0x220) returned 1
	[0053.683] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0053.683] SetEndOfFile (hFile=0x20c) returned 1
	[0053.686] CloseHandle (hObject=0x20c) returned 1
	[0053.687] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0053.687] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 1
	[0053.687] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0053.688] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0053.688] lstrlenW (lpString=".doc") returned 4
	[0053.688] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0053.688] lstrlenW (lpString=".docx") returned 5
	[0053.688] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0053.688] lstrlenW (lpString=".pdf") returned 4
	[0053.688] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0053.688] lstrlenW (lpString=".xls") returned 4
	[0053.688] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0053.688] lstrlenW (lpString=".xlsx") returned 5
	[0053.688] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0053.688] lstrlenW (lpString=".ppt") returned 4
	[0053.688] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0053.688] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0053.688] lstrlenW (lpString=".zip") returned 4
	[0053.688] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0053.688] lstrlenW (lpString=".rar") returned 4
	[0053.688] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0053.688] lstrlenW (lpString=".bz2") returned 4
	[0053.688] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0053.688] lstrlenW (lpString=".7z") returned 3
	[0053.688] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0053.688] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0053.688] lstrlenW (lpString=".dbf") returned 4
	[0053.688] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0053.688] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0053.688] lstrlenW (lpString=".1cd") returned 4
	[0053.688] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0053.688] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0053.688] lstrlenW (lpString=".jpg") returned 4
	[0053.688] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0053.689] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0053.689] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0053.689] lstrlenW (lpString=".doc") returned 4
	[0053.689] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0053.689] lstrlenW (lpString=".docx") returned 5
	[0053.689] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0053.689] lstrlenW (lpString=".pdf") returned 4
	[0053.689] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0053.689] lstrlenW (lpString=".xls") returned 4
	[0053.689] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0053.689] lstrlenW (lpString=".xlsx") returned 5
	[0053.689] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0053.689] lstrlenW (lpString=".ppt") returned 4
	[0053.689] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0053.689] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0053.689] lstrlenW (lpString=".zip") returned 4
	[0053.689] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0053.689] lstrlenW (lpString=".rar") returned 4
	[0053.689] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0053.689] lstrlenW (lpString=".bz2") returned 4
	[0053.689] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0053.689] lstrlenW (lpString=".7z") returned 3
	[0053.689] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0053.689] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0053.689] lstrlenW (lpString=".dbf") returned 4
	[0053.689] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0053.689] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0053.689] lstrlenW (lpString=".1cd") returned 4
	[0053.689] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0053.689] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0053.689] lstrlenW (lpString=".jpg") returned 4
	[0053.689] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0053.690] lstrcmpiW (lpString1=".exe", lpString2=".beets") returned 1
	[0053.690] lstrlenW (lpString="setup.exe") returned 9
	[0053.690] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0054.969] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=1377656) returned 1
	[0054.969] CloseHandle (hObject=0x20c) returned 1
	[0054.969] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 0x2020
	[0054.970] GetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0054.970] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0054.970] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0054.970] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0054.970] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0054.970] GetLastError () returned 0x0
	[0054.970] ReadFile (in: hFile=0x20c, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xffff0, lpOverlapped=0x0) returned 1
	[0054.995] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xffff0, lpOverlapped=0x0) returned 1
	[0055.012] ReadFile (in: hFile=0x20c, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x50588, lpOverlapped=0x0) returned 1
	[0055.025] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0x50590, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0x50590, lpOverlapped=0x0) returned 1
	[0055.035] ReadFile (in: hFile=0x20c, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.035] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0055.035] SetEndOfFile (hFile=0x220) returned 1
	[0055.035] CloseHandle (hObject=0x220) returned 1
	[0055.035] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.035] SetEndOfFile (hFile=0x20c) returned 1
	[0055.038] CloseHandle (hObject=0x20c) returned 1
	[0055.038] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x2020) returned 1
	[0055.039] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 1
	[0055.039] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0055.039] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0055.039] lstrlenW (lpString=".doc") returned 4
	[0055.039] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0055.039] lstrlenW (lpString=".docx") returned 5
	[0055.039] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0055.039] lstrlenW (lpString=".pdf") returned 4
	[0055.039] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0055.039] lstrlenW (lpString=".xls") returned 4
	[0055.039] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0055.039] lstrlenW (lpString=".xlsx") returned 5
	[0055.039] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0055.039] lstrlenW (lpString=".ppt") returned 4
	[0055.039] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0055.039] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0055.039] lstrlenW (lpString=".zip") returned 4
	[0055.039] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0055.039] lstrlenW (lpString=".rar") returned 4
	[0055.039] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0055.039] lstrlenW (lpString=".bz2") returned 4
	[0055.039] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0055.040] lstrlenW (lpString=".7z") returned 3
	[0055.040] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0055.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0055.040] lstrlenW (lpString=".dbf") returned 4
	[0055.040] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0055.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0055.040] lstrlenW (lpString=".1cd") returned 4
	[0055.040] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0055.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0055.040] lstrlenW (lpString=".jpg") returned 4
	[0055.040] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0055.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0055.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0055.040] lstrlenW (lpString=".doc") returned 4
	[0055.040] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0055.040] lstrlenW (lpString=".docx") returned 5
	[0055.040] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0055.040] lstrlenW (lpString=".pdf") returned 4
	[0055.040] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0055.040] lstrlenW (lpString=".xls") returned 4
	[0055.040] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0055.040] lstrlenW (lpString=".xlsx") returned 5
	[0055.040] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0055.040] lstrlenW (lpString=".ppt") returned 4
	[0055.040] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0055.040] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0055.040] lstrlenW (lpString=".zip") returned 4
	[0055.040] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0055.040] lstrlenW (lpString=".rar") returned 4
	[0055.040] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0055.040] lstrlenW (lpString=".bz2") returned 4
	[0055.041] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0055.041] lstrlenW (lpString=".7z") returned 3
	[0055.041] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0055.041] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0055.041] lstrlenW (lpString=".dbf") returned 4
	[0055.041] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0055.041] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0055.041] lstrlenW (lpString=".1cd") returned 4
	[0055.041] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0055.041] lstrlenW (lpString="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 72
	[0055.041] lstrlenW (lpString=".jpg") returned 4
	[0055.041] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0055.041] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0055.041] lstrlenW (lpString="DBGHELP.DLL") returned 11
	[0055.041] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0055.042] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=1369952) returned 1
	[0055.042] CloseHandle (hObject=0x20c) returned 1
	[0055.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll")) returned 0x20
	[0055.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.042] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0055.043] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.043] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.043] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220
	[0055.043] GetLastError () returned 0x0
	[0055.043] ReadFile (in: hFile=0x20c, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xffff0, lpOverlapped=0x0) returned 1
	[0055.066] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xffff0, lpOverlapped=0x0) returned 1
	[0055.082] ReadFile (in: hFile=0x20c, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x4e770, lpOverlapped=0x0) returned 1
	[0055.354] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0x4e780, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0x4e780, lpOverlapped=0x0) returned 1
	[0055.362] ReadFile (in: hFile=0x20c, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.362] WriteFile (in: hFile=0x220, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xea, lpOverlapped=0x0) returned 1
	[0055.362] SetEndOfFile (hFile=0x220) returned 1
	[0055.362] CloseHandle (hObject=0x220) returned 1
	[0055.363] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.363] SetEndOfFile (hFile=0x20c) returned 1
	[0055.366] CloseHandle (hObject=0x20c) returned 1
	[0055.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.366] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll")) returned 1
	[0055.366] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61
	[0055.366] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61
	[0055.366] lstrlenW (lpString=".doc") returned 4
	[0055.366] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0055.366] lstrlenW (lpString=".docx") returned 5
	[0055.366] lstrcmpiW (lpString1=".docx", lpString2="P.DLL") returned -1
	[0055.366] lstrlenW (lpString=".pdf") returned 4
	[0055.367] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0055.367] lstrlenW (lpString=".xls") returned 4
	[0055.367] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0055.367] lstrlenW (lpString=".xlsx") returned 5
	[0055.367] lstrcmpiW (lpString1=".xlsx", lpString2="P.DLL") returned -1
	[0055.367] lstrlenW (lpString=".ppt") returned 4
	[0055.367] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0055.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61
	[0055.367] lstrlenW (lpString=".zip") returned 4
	[0055.367] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0055.367] lstrlenW (lpString=".rar") returned 4
	[0055.367] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0055.367] lstrlenW (lpString=".bz2") returned 4
	[0055.367] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0055.367] lstrlenW (lpString=".7z") returned 3
	[0055.367] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0055.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61
	[0055.367] lstrlenW (lpString=".dbf") returned 4
	[0055.367] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0055.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61
	[0055.367] lstrlenW (lpString=".1cd") returned 4
	[0055.367] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0055.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61
	[0055.367] lstrlenW (lpString=".jpg") returned 4
	[0055.367] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0055.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61
	[0055.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61
	[0055.367] lstrlenW (lpString=".doc") returned 4
	[0055.367] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0055.367] lstrlenW (lpString=".docx") returned 5
	[0055.367] lstrcmpiW (lpString1=".docx", lpString2="P.DLL") returned -1
	[0055.367] lstrlenW (lpString=".pdf") returned 4
	[0055.368] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0055.368] lstrlenW (lpString=".xls") returned 4
	[0055.368] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0055.368] lstrlenW (lpString=".xlsx") returned 5
	[0055.368] lstrcmpiW (lpString1=".xlsx", lpString2="P.DLL") returned -1
	[0055.368] lstrlenW (lpString=".ppt") returned 4
	[0055.368] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0055.368] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61
	[0055.368] lstrlenW (lpString=".zip") returned 4
	[0055.368] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0055.368] lstrlenW (lpString=".rar") returned 4
	[0055.368] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0055.368] lstrlenW (lpString=".bz2") returned 4
	[0055.368] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0055.368] lstrlenW (lpString=".7z") returned 3
	[0055.368] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0055.368] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61
	[0055.368] lstrlenW (lpString=".dbf") returned 4
	[0055.368] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0055.368] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61
	[0055.368] lstrlenW (lpString=".1cd") returned 4
	[0055.368] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0055.368] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL") returned 61
	[0055.368] lstrlenW (lpString=".jpg") returned 4
	[0055.368] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0055.368] lstrcmpiW (lpString1=".EXE", lpString2=".beets") returned 1
	[0055.368] lstrlenW (lpString="DWTRIG20.EXE") returned 12
	[0055.369] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0055.571] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=629664) returned 1
	[0055.571] CloseHandle (hObject=0x1d4) returned 1
	[0055.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe")) returned 0x20
	[0055.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0055.571] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4
	[0055.571] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.572] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.572] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0055.572] GetLastError () returned 0x0
	[0055.572] ReadFile (in: hFile=0x1d4, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x99ba0, lpOverlapped=0x0) returned 1
	[0055.585] WriteFile (in: hFile=0x210, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0x99bb0, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0x99bb0, lpOverlapped=0x0) returned 1
	[0055.872] ReadFile (in: hFile=0x1d4, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0055.872] WriteFile (in: hFile=0x210, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0055.872] SetEndOfFile (hFile=0x210) returned 1
	[0055.872] CloseHandle (hObject=0x210) returned 1
	[0055.873] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0055.873] SetEndOfFile (hFile=0x1d4) returned 1
	[0055.878] CloseHandle (hObject=0x1d4) returned 1
	[0055.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0055.878] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe")) returned 1
	[0055.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62
	[0055.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62
	[0055.879] lstrlenW (lpString=".doc") returned 4
	[0055.879] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0055.879] lstrlenW (lpString=".docx") returned 5
	[0055.879] lstrcmpiW (lpString1=".docx", lpString2="0.EXE") returned -1
	[0055.879] lstrlenW (lpString=".pdf") returned 4
	[0055.879] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0055.879] lstrlenW (lpString=".xls") returned 4
	[0055.879] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0055.879] lstrlenW (lpString=".xlsx") returned 5
	[0055.879] lstrcmpiW (lpString1=".xlsx", lpString2="0.EXE") returned -1
	[0055.879] lstrlenW (lpString=".ppt") returned 4
	[0055.879] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0055.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62
	[0055.879] lstrlenW (lpString=".zip") returned 4
	[0055.879] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0055.879] lstrlenW (lpString=".rar") returned 4
	[0055.879] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0055.879] lstrlenW (lpString=".bz2") returned 4
	[0055.879] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0055.879] lstrlenW (lpString=".7z") returned 3
	[0055.879] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0055.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62
	[0055.879] lstrlenW (lpString=".dbf") returned 4
	[0055.879] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0055.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62
	[0055.879] lstrlenW (lpString=".1cd") returned 4
	[0055.879] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0055.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62
	[0055.880] lstrlenW (lpString=".jpg") returned 4
	[0055.880] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0055.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62
	[0055.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62
	[0055.880] lstrlenW (lpString=".doc") returned 4
	[0055.880] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0055.880] lstrlenW (lpString=".docx") returned 5
	[0055.880] lstrcmpiW (lpString1=".docx", lpString2="0.EXE") returned -1
	[0055.880] lstrlenW (lpString=".pdf") returned 4
	[0055.880] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0055.880] lstrlenW (lpString=".xls") returned 4
	[0055.880] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0055.880] lstrlenW (lpString=".xlsx") returned 5
	[0055.880] lstrcmpiW (lpString1=".xlsx", lpString2="0.EXE") returned -1
	[0055.880] lstrlenW (lpString=".ppt") returned 4
	[0055.880] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0055.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62
	[0055.880] lstrlenW (lpString=".zip") returned 4
	[0055.880] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0055.880] lstrlenW (lpString=".rar") returned 4
	[0055.880] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0055.880] lstrlenW (lpString=".bz2") returned 4
	[0055.880] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0055.880] lstrlenW (lpString=".7z") returned 3
	[0055.880] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0055.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62
	[0055.880] lstrlenW (lpString=".dbf") returned 4
	[0055.880] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0055.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62
	[0055.880] lstrlenW (lpString=".1cd") returned 4
	[0055.880] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0055.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE") returned 62
	[0055.880] lstrlenW (lpString=".jpg") returned 4
	[0055.881] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0055.881] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0055.881] lstrlenW (lpString="VISFILT.DLL") returned 11
	[0055.881] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0056.168] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=2124664) returned 1
	[0056.168] CloseHandle (hObject=0x1f8) returned 1
	[0056.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll")) returned 0x20
	[0056.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0056.170] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0056.171] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0056.171] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0056.171] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0056.171] ReadFile (in: hFile=0x1f8, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0057.115] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0xace7d, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0057.115] ReadFile (in: hFile=0x1f8, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0057.121] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0057.121] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x1c6b78, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0057.121] ReadFile (in: hFile=0x1f8, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0057.146] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.146] WriteFile (in: hFile=0x1f8, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc0102, lpOverlapped=0x0) returned 1
	[0057.348] SetEndOfFile (hFile=0x1f8) returned 1
	[0057.348] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8d6d128
	[0057.352] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0057.353] WriteFile (in: hFile=0x1f8, lpBuffer=0x8d6d128*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d128*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0057.354] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0xace7d, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0057.354] WriteFile (in: hFile=0x1f8, lpBuffer=0x8d6d128*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d128*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0057.356] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x1c6b78, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0057.356] WriteFile (in: hFile=0x1f8, lpBuffer=0x8d6d128*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8d6d128*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0057.357] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8d6d128 | out: hHeap=0x5350000) returned 1
	[0057.357] CloseHandle (hObject=0x1f8) returned 1
	[0057.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.358] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66
	[0057.358] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66
	[0057.358] lstrlenW (lpString=".doc") returned 4
	[0057.358] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0057.358] lstrlenW (lpString=".docx") returned 5
	[0057.358] lstrcmpiW (lpString1=".docx", lpString2="T.DLL") returned -1
	[0057.358] lstrlenW (lpString=".pdf") returned 4
	[0057.358] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0057.358] lstrlenW (lpString=".xls") returned 4
	[0057.358] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0057.358] lstrlenW (lpString=".xlsx") returned 5
	[0057.358] lstrcmpiW (lpString1=".xlsx", lpString2="T.DLL") returned -1
	[0057.358] lstrlenW (lpString=".ppt") returned 4
	[0057.358] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0057.358] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66
	[0057.358] lstrlenW (lpString=".zip") returned 4
	[0057.358] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0057.358] lstrlenW (lpString=".rar") returned 4
	[0057.358] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0057.358] lstrlenW (lpString=".bz2") returned 4
	[0057.358] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0057.358] lstrlenW (lpString=".7z") returned 3
	[0057.359] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0057.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66
	[0057.359] lstrlenW (lpString=".dbf") returned 4
	[0057.359] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0057.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66
	[0057.359] lstrlenW (lpString=".1cd") returned 4
	[0057.359] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0057.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66
	[0057.359] lstrlenW (lpString=".jpg") returned 4
	[0057.359] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0057.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66
	[0057.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66
	[0057.359] lstrlenW (lpString=".doc") returned 4
	[0057.359] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0057.359] lstrlenW (lpString=".docx") returned 5
	[0057.359] lstrcmpiW (lpString1=".docx", lpString2="T.DLL") returned -1
	[0057.359] lstrlenW (lpString=".pdf") returned 4
	[0057.359] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0057.359] lstrlenW (lpString=".xls") returned 4
	[0057.359] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0057.359] lstrlenW (lpString=".xlsx") returned 5
	[0057.359] lstrcmpiW (lpString1=".xlsx", lpString2="T.DLL") returned -1
	[0057.359] lstrlenW (lpString=".ppt") returned 4
	[0057.359] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0057.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66
	[0057.359] lstrlenW (lpString=".zip") returned 4
	[0057.359] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0057.359] lstrlenW (lpString=".rar") returned 4
	[0057.359] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0057.359] lstrlenW (lpString=".bz2") returned 4
	[0057.359] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0057.360] lstrlenW (lpString=".7z") returned 3
	[0057.360] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0057.360] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66
	[0057.360] lstrlenW (lpString=".dbf") returned 4
	[0057.360] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0057.360] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66
	[0057.360] lstrlenW (lpString=".1cd") returned 4
	[0057.360] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0057.360] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL") returned 66
	[0057.360] lstrlenW (lpString=".jpg") returned 4
	[0057.360] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0057.360] lstrcmpiW (lpString1=".FLT", lpString2=".beets") returned 1
	[0057.360] lstrlenW (lpString="PICTIM32.FLT") returned 12
	[0057.360] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0057.493] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=73080) returned 1
	[0057.493] CloseHandle (hObject=0x230) returned 1
	[0057.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt")) returned 0x20
	[0057.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0057.493] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0057.494] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.494] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.494] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0057.494] GetLastError () returned 0x0
	[0057.494] ReadFile (in: hFile=0x230, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x11d78, lpOverlapped=0x0) returned 1
	[0057.592] WriteFile (in: hFile=0x234, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0x11d80, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0x11d80, lpOverlapped=0x0) returned 1
	[0057.594] ReadFile (in: hFile=0x230, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.594] WriteFile (in: hFile=0x234, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0057.594] SetEndOfFile (hFile=0x234) returned 1
	[0057.594] CloseHandle (hObject=0x234) returned 1
	[0057.594] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.594] SetEndOfFile (hFile=0x230) returned 1
	[0057.595] CloseHandle (hObject=0x230) returned 1
	[0057.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0057.596] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt")) returned 1
	[0057.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67
	[0057.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67
	[0057.596] lstrlenW (lpString=".doc") returned 4
	[0057.596] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0057.596] lstrlenW (lpString=".docx") returned 5
	[0057.596] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0057.596] lstrlenW (lpString=".pdf") returned 4
	[0057.596] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0057.596] lstrlenW (lpString=".xls") returned 4
	[0057.596] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0057.596] lstrlenW (lpString=".xlsx") returned 5
	[0057.596] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0057.596] lstrlenW (lpString=".ppt") returned 4
	[0057.596] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0057.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67
	[0057.596] lstrlenW (lpString=".zip") returned 4
	[0057.596] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0057.596] lstrlenW (lpString=".rar") returned 4
	[0057.596] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0057.596] lstrlenW (lpString=".bz2") returned 4
	[0057.597] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0057.597] lstrlenW (lpString=".7z") returned 3
	[0057.597] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0057.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67
	[0057.597] lstrlenW (lpString=".dbf") returned 4
	[0057.597] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0057.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67
	[0057.597] lstrlenW (lpString=".1cd") returned 4
	[0057.597] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0057.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67
	[0057.597] lstrlenW (lpString=".jpg") returned 4
	[0057.597] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0057.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67
	[0057.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67
	[0057.597] lstrlenW (lpString=".doc") returned 4
	[0057.597] lstrcmpiW (lpString1=".doc", lpString2=".FLT") returned -1
	[0057.597] lstrlenW (lpString=".docx") returned 5
	[0057.597] lstrcmpiW (lpString1=".docx", lpString2="2.FLT") returned -1
	[0057.597] lstrlenW (lpString=".pdf") returned 4
	[0057.597] lstrcmpiW (lpString1=".pdf", lpString2=".FLT") returned 1
	[0057.597] lstrlenW (lpString=".xls") returned 4
	[0057.597] lstrcmpiW (lpString1=".xls", lpString2=".FLT") returned 1
	[0057.597] lstrlenW (lpString=".xlsx") returned 5
	[0057.597] lstrcmpiW (lpString1=".xlsx", lpString2="2.FLT") returned -1
	[0057.597] lstrlenW (lpString=".ppt") returned 4
	[0057.597] lstrcmpiW (lpString1=".ppt", lpString2=".FLT") returned 1
	[0057.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67
	[0057.597] lstrlenW (lpString=".zip") returned 4
	[0057.597] lstrcmpiW (lpString1=".zip", lpString2=".FLT") returned 1
	[0057.597] lstrlenW (lpString=".rar") returned 4
	[0057.597] lstrcmpiW (lpString1=".rar", lpString2=".FLT") returned 1
	[0057.597] lstrlenW (lpString=".bz2") returned 4
	[0057.598] lstrcmpiW (lpString1=".bz2", lpString2=".FLT") returned -1
	[0057.598] lstrlenW (lpString=".7z") returned 3
	[0057.598] lstrcmpiW (lpString1=".7z", lpString2="FLT") returned -1
	[0057.598] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67
	[0057.598] lstrlenW (lpString=".dbf") returned 4
	[0057.598] lstrcmpiW (lpString1=".dbf", lpString2=".FLT") returned -1
	[0057.598] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67
	[0057.598] lstrlenW (lpString=".1cd") returned 4
	[0057.598] lstrcmpiW (lpString1=".1cd", lpString2=".FLT") returned -1
	[0057.598] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT") returned 67
	[0057.598] lstrlenW (lpString=".jpg") returned 4
	[0057.598] lstrcmpiW (lpString1=".jpg", lpString2=".FLT") returned 1
	[0057.598] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0057.598] lstrlenW (lpString="hxds.dll") returned 8
	[0057.598] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0057.599] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=1257984) returned 1
	[0057.599] CloseHandle (hObject=0x230) returned 1
	[0057.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll")) returned 0x20
	[0057.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0057.600] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0057.600] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.600] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0057.600] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0057.600] GetLastError () returned 0x0
	[0057.600] ReadFile (in: hFile=0x230, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xffff0, lpOverlapped=0x0) returned 1
	[0057.622] WriteFile (in: hFile=0x234, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xffff0, lpOverlapped=0x0) returned 1
	[0057.817] ReadFile (in: hFile=0x230, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x33210, lpOverlapped=0x0) returned 1
	[0057.828] WriteFile (in: hFile=0x234, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0x33220, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0x33220, lpOverlapped=0x0) returned 1
	[0057.834] ReadFile (in: hFile=0x230, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0057.834] WriteFile (in: hFile=0x234, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xe4, lpOverlapped=0x0) returned 1
	[0057.834] SetEndOfFile (hFile=0x234) returned 1
	[0059.000] CloseHandle (hObject=0x234) returned 1
	[0059.001] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.001] SetEndOfFile (hFile=0x230) returned 1
	[0059.003] CloseHandle (hObject=0x230) returned 1
	[0059.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0059.003] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll")) returned 1
	[0059.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60
	[0059.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60
	[0059.003] lstrlenW (lpString=".doc") returned 4
	[0059.003] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0059.003] lstrlenW (lpString=".docx") returned 5
	[0059.003] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0059.003] lstrlenW (lpString=".pdf") returned 4
	[0059.003] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0059.003] lstrlenW (lpString=".xls") returned 4
	[0059.003] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0059.004] lstrlenW (lpString=".xlsx") returned 5
	[0059.004] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0059.004] lstrlenW (lpString=".ppt") returned 4
	[0059.004] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0059.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60
	[0059.004] lstrlenW (lpString=".zip") returned 4
	[0059.004] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0059.004] lstrlenW (lpString=".rar") returned 4
	[0059.004] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0059.004] lstrlenW (lpString=".bz2") returned 4
	[0059.004] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0059.004] lstrlenW (lpString=".7z") returned 3
	[0059.004] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0059.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60
	[0059.004] lstrlenW (lpString=".dbf") returned 4
	[0059.004] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0059.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60
	[0059.004] lstrlenW (lpString=".1cd") returned 4
	[0059.004] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0059.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60
	[0059.004] lstrlenW (lpString=".jpg") returned 4
	[0059.004] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0059.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60
	[0059.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60
	[0059.004] lstrlenW (lpString=".doc") returned 4
	[0059.004] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0059.004] lstrlenW (lpString=".docx") returned 5
	[0059.004] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0059.004] lstrlenW (lpString=".pdf") returned 4
	[0059.004] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0059.004] lstrlenW (lpString=".xls") returned 4
	[0059.004] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0059.004] lstrlenW (lpString=".xlsx") returned 5
	[0059.005] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0059.005] lstrlenW (lpString=".ppt") returned 4
	[0059.005] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0059.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60
	[0059.005] lstrlenW (lpString=".zip") returned 4
	[0059.005] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0059.005] lstrlenW (lpString=".rar") returned 4
	[0059.005] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0059.005] lstrlenW (lpString=".bz2") returned 4
	[0059.005] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0059.005] lstrlenW (lpString=".7z") returned 3
	[0059.005] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0059.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60
	[0059.005] lstrlenW (lpString=".dbf") returned 4
	[0059.005] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0059.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60
	[0059.005] lstrlenW (lpString=".1cd") returned 4
	[0059.005] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0059.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll") returned 60
	[0059.005] lstrlenW (lpString=".jpg") returned 4
	[0059.005] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0059.005] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0059.005] lstrlenW (lpString="InkObj.dll.mui") returned 14
	[0059.005] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0059.191] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=4608) returned 1
	[0059.191] CloseHandle (hObject=0x1f8) returned 1
	[0059.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20
	[0059.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.191] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.191] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0059.191] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0059.191] lstrlenW (lpString=".doc") returned 4
	[0059.191] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.191] lstrlenW (lpString=".docx") returned 5
	[0059.191] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.191] lstrlenW (lpString=".pdf") returned 4
	[0059.191] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.191] lstrlenW (lpString=".xls") returned 4
	[0059.191] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.191] lstrlenW (lpString=".xlsx") returned 5
	[0059.191] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.191] lstrlenW (lpString=".ppt") returned 4
	[0059.192] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0059.192] lstrlenW (lpString=".zip") returned 4
	[0059.192] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.192] lstrlenW (lpString=".rar") returned 4
	[0059.192] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.192] lstrlenW (lpString=".bz2") returned 4
	[0059.192] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.192] lstrlenW (lpString=".7z") returned 3
	[0059.192] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0059.192] lstrlenW (lpString=".dbf") returned 4
	[0059.192] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0059.192] lstrlenW (lpString=".1cd") returned 4
	[0059.192] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0059.192] lstrlenW (lpString=".jpg") returned 4
	[0059.192] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0059.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0059.192] lstrlenW (lpString=".doc") returned 4
	[0059.192] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.192] lstrlenW (lpString=".docx") returned 5
	[0059.192] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.192] lstrlenW (lpString=".pdf") returned 4
	[0059.192] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.192] lstrlenW (lpString=".xls") returned 4
	[0059.192] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.192] lstrlenW (lpString=".xlsx") returned 5
	[0059.192] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.192] lstrlenW (lpString=".ppt") returned 4
	[0059.193] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0059.193] lstrlenW (lpString=".zip") returned 4
	[0059.193] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.193] lstrlenW (lpString=".rar") returned 4
	[0059.193] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.193] lstrlenW (lpString=".bz2") returned 4
	[0059.193] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.193] lstrlenW (lpString=".7z") returned 3
	[0059.193] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0059.193] lstrlenW (lpString=".dbf") returned 4
	[0059.193] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0059.193] lstrlenW (lpString=".1cd") returned 4
	[0059.193] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0059.193] lstrlenW (lpString=".jpg") returned 4
	[0059.193] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.193] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0059.193] lstrlenW (lpString="InkWatson.exe.mui") returned 17
	[0059.193] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8
	[0059.393] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=9216) returned 1
	[0059.393] CloseHandle (hObject=0x1e8) returned 1
	[0059.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui")) returned 0x20
	[0059.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.394] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.394] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui") returned 74
	[0059.394] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui") returned 74
	[0059.394] lstrlenW (lpString=".doc") returned 4
	[0059.394] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.394] lstrlenW (lpString=".docx") returned 5
	[0059.394] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0059.394] lstrlenW (lpString=".pdf") returned 4
	[0059.394] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.394] lstrlenW (lpString=".xls") returned 4
	[0059.394] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.394] lstrlenW (lpString=".xlsx") returned 5
	[0059.394] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0059.394] lstrlenW (lpString=".ppt") returned 4
	[0059.394] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.394] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui") returned 74
	[0059.394] lstrlenW (lpString=".zip") returned 4
	[0059.394] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.394] lstrlenW (lpString=".rar") returned 4
	[0059.394] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.394] lstrlenW (lpString=".bz2") returned 4
	[0059.394] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.394] lstrlenW (lpString=".7z") returned 3
	[0059.394] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.394] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui") returned 74
	[0059.394] lstrlenW (lpString=".dbf") returned 4
	[0059.394] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.394] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui") returned 74
	[0059.395] lstrlenW (lpString=".1cd") returned 4
	[0059.395] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.395] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui") returned 74
	[0059.395] lstrlenW (lpString=".jpg") returned 4
	[0059.395] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.395] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui") returned 74
	[0059.395] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui") returned 74
	[0059.395] lstrlenW (lpString=".doc") returned 4
	[0059.395] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.395] lstrlenW (lpString=".docx") returned 5
	[0059.395] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0059.395] lstrlenW (lpString=".pdf") returned 4
	[0059.395] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.395] lstrlenW (lpString=".xls") returned 4
	[0059.395] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.395] lstrlenW (lpString=".xlsx") returned 5
	[0059.395] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0059.395] lstrlenW (lpString=".ppt") returned 4
	[0059.395] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.395] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui") returned 74
	[0059.395] lstrlenW (lpString=".zip") returned 4
	[0059.395] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.395] lstrlenW (lpString=".rar") returned 4
	[0059.395] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.395] lstrlenW (lpString=".bz2") returned 4
	[0059.395] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.395] lstrlenW (lpString=".7z") returned 3
	[0059.395] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.395] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui") returned 74
	[0059.395] lstrlenW (lpString=".dbf") returned 4
	[0059.396] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.396] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui") returned 74
	[0059.396] lstrlenW (lpString=".1cd") returned 4
	[0059.396] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.396] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui") returned 74
	[0059.396] lstrlenW (lpString=".jpg") returned 4
	[0059.396] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.396] lstrcmpiW (lpString1=".exe", lpString2=".beets") returned 1
	[0059.396] lstrlenW (lpString="ShapeCollector.exe") returned 18
	[0059.396] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0059.498] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=695296) returned 1
	[0059.498] CloseHandle (hObject=0x214) returned 1
	[0059.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20
	[0059.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.499] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.499] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe") returned 69
	[0059.499] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe") returned 69
	[0059.499] lstrlenW (lpString=".doc") returned 4
	[0059.499] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0059.499] lstrlenW (lpString=".docx") returned 5
	[0059.499] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0059.499] lstrlenW (lpString=".pdf") returned 4
	[0059.499] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0059.499] lstrlenW (lpString=".xls") returned 4
	[0059.499] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0059.499] lstrlenW (lpString=".xlsx") returned 5
	[0059.499] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0059.499] lstrlenW (lpString=".ppt") returned 4
	[0059.499] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0059.499] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe") returned 69
	[0059.499] lstrlenW (lpString=".zip") returned 4
	[0059.499] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0059.499] lstrlenW (lpString=".rar") returned 4
	[0059.499] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0059.499] lstrlenW (lpString=".bz2") returned 4
	[0059.499] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0059.499] lstrlenW (lpString=".7z") returned 3
	[0059.499] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0059.499] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe") returned 69
	[0059.499] lstrlenW (lpString=".dbf") returned 4
	[0059.499] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0059.499] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe") returned 69
	[0059.499] lstrlenW (lpString=".1cd") returned 4
	[0059.500] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0059.500] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe") returned 69
	[0059.500] lstrlenW (lpString=".jpg") returned 4
	[0059.500] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0059.500] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe") returned 69
	[0059.500] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe") returned 69
	[0059.500] lstrlenW (lpString=".doc") returned 4
	[0059.500] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0059.500] lstrlenW (lpString=".docx") returned 5
	[0059.500] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0059.500] lstrlenW (lpString=".pdf") returned 4
	[0059.500] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0059.500] lstrlenW (lpString=".xls") returned 4
	[0059.500] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0059.500] lstrlenW (lpString=".xlsx") returned 5
	[0059.500] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0059.500] lstrlenW (lpString=".ppt") returned 4
	[0059.500] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0059.500] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe") returned 69
	[0059.500] lstrlenW (lpString=".zip") returned 4
	[0059.500] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0059.500] lstrlenW (lpString=".rar") returned 4
	[0059.500] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0059.500] lstrlenW (lpString=".bz2") returned 4
	[0059.500] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0059.500] lstrlenW (lpString=".7z") returned 3
	[0059.500] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0059.500] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe") returned 69
	[0059.500] lstrlenW (lpString=".dbf") returned 4
	[0059.500] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0059.500] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe") returned 69
	[0059.500] lstrlenW (lpString=".1cd") returned 4
	[0059.501] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0059.501] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe") returned 69
	[0059.501] lstrlenW (lpString=".jpg") returned 4
	[0059.501] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0059.501] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0059.501] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0059.501] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0059.501] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=3584) returned 1
	[0059.501] CloseHandle (hObject=0x214) returned 1
	[0059.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20
	[0059.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.502] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.502] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0059.502] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0059.502] lstrlenW (lpString=".doc") returned 4
	[0059.502] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.502] lstrlenW (lpString=".docx") returned 5
	[0059.502] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.502] lstrlenW (lpString=".pdf") returned 4
	[0059.502] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.502] lstrlenW (lpString=".xls") returned 4
	[0059.502] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.502] lstrlenW (lpString=".xlsx") returned 5
	[0059.502] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.502] lstrlenW (lpString=".ppt") returned 4
	[0059.502] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.502] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0059.502] lstrlenW (lpString=".zip") returned 4
	[0059.502] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.502] lstrlenW (lpString=".rar") returned 4
	[0059.502] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.502] lstrlenW (lpString=".bz2") returned 4
	[0059.502] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.502] lstrlenW (lpString=".7z") returned 3
	[0059.502] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0059.503] lstrlenW (lpString=".dbf") returned 4
	[0059.503] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0059.503] lstrlenW (lpString=".1cd") returned 4
	[0059.503] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0059.503] lstrlenW (lpString=".jpg") returned 4
	[0059.503] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0059.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0059.503] lstrlenW (lpString=".doc") returned 4
	[0059.503] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.503] lstrlenW (lpString=".docx") returned 5
	[0059.503] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0059.503] lstrlenW (lpString=".pdf") returned 4
	[0059.503] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.503] lstrlenW (lpString=".xls") returned 4
	[0059.503] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.503] lstrlenW (lpString=".xlsx") returned 5
	[0059.503] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0059.503] lstrlenW (lpString=".ppt") returned 4
	[0059.503] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0059.503] lstrlenW (lpString=".zip") returned 4
	[0059.503] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.503] lstrlenW (lpString=".rar") returned 4
	[0059.503] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.503] lstrlenW (lpString=".bz2") returned 4
	[0059.503] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.503] lstrlenW (lpString=".7z") returned 3
	[0059.503] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.504] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0059.504] lstrlenW (lpString=".dbf") returned 4
	[0059.504] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.504] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0059.504] lstrlenW (lpString=".1cd") returned 4
	[0059.504] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.504] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0059.504] lstrlenW (lpString=".jpg") returned 4
	[0059.504] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.504] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0059.504] lstrlenW (lpString="TipBand.dll") returned 11
	[0059.504] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0059.504] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=110592) returned 1
	[0059.504] CloseHandle (hObject=0x214) returned 1
	[0059.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll")) returned 0x20
	[0059.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.505] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.505] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll") returned 62
	[0059.505] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll") returned 62
	[0059.505] lstrlenW (lpString=".doc") returned 4
	[0059.505] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0059.505] lstrlenW (lpString=".docx") returned 5
	[0059.505] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0059.505] lstrlenW (lpString=".pdf") returned 4
	[0059.505] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0059.505] lstrlenW (lpString=".xls") returned 4
	[0059.505] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0059.505] lstrlenW (lpString=".xlsx") returned 5
	[0059.505] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0059.505] lstrlenW (lpString=".ppt") returned 4
	[0059.505] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0059.505] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll") returned 62
	[0059.505] lstrlenW (lpString=".zip") returned 4
	[0059.505] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0059.505] lstrlenW (lpString=".rar") returned 4
	[0059.505] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0059.505] lstrlenW (lpString=".bz2") returned 4
	[0059.505] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0059.505] lstrlenW (lpString=".7z") returned 3
	[0059.506] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0059.506] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll") returned 62
	[0059.506] lstrlenW (lpString=".dbf") returned 4
	[0059.506] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0059.506] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll") returned 62
	[0059.506] lstrlenW (lpString=".1cd") returned 4
	[0059.506] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0059.506] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll") returned 62
	[0059.506] lstrlenW (lpString=".jpg") returned 4
	[0059.506] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0059.506] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll") returned 62
	[0059.506] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll") returned 62
	[0059.506] lstrlenW (lpString=".doc") returned 4
	[0059.506] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0059.506] lstrlenW (lpString=".docx") returned 5
	[0059.506] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0059.506] lstrlenW (lpString=".pdf") returned 4
	[0059.506] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0059.506] lstrlenW (lpString=".xls") returned 4
	[0059.506] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0059.506] lstrlenW (lpString=".xlsx") returned 5
	[0059.506] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0059.506] lstrlenW (lpString=".ppt") returned 4
	[0059.506] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0059.506] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll") returned 62
	[0059.506] lstrlenW (lpString=".zip") returned 4
	[0059.506] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0059.506] lstrlenW (lpString=".rar") returned 4
	[0059.506] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0059.506] lstrlenW (lpString=".bz2") returned 4
	[0059.507] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0059.507] lstrlenW (lpString=".7z") returned 3
	[0059.507] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0059.507] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll") returned 62
	[0059.507] lstrlenW (lpString=".dbf") returned 4
	[0059.507] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0059.507] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll") returned 62
	[0059.507] lstrlenW (lpString=".1cd") returned 4
	[0059.507] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0059.507] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll") returned 62
	[0059.507] lstrlenW (lpString=".jpg") returned 4
	[0059.507] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0059.507] lstrcmpiW (lpString1=".dll", lpString2=".beets") returned 1
	[0059.507] lstrlenW (lpString="TipRes.dll") returned 10
	[0059.507] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0059.507] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=544768) returned 1
	[0059.507] CloseHandle (hObject=0x214) returned 1
	[0059.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20
	[0059.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.508] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll") returned 61
	[0059.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll") returned 61
	[0059.508] lstrlenW (lpString=".doc") returned 4
	[0059.508] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0059.508] lstrlenW (lpString=".docx") returned 5
	[0059.508] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0059.508] lstrlenW (lpString=".pdf") returned 4
	[0059.508] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0059.508] lstrlenW (lpString=".xls") returned 4
	[0059.508] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0059.508] lstrlenW (lpString=".xlsx") returned 5
	[0059.508] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0059.508] lstrlenW (lpString=".ppt") returned 4
	[0059.508] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0059.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll") returned 61
	[0059.508] lstrlenW (lpString=".zip") returned 4
	[0059.508] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0059.508] lstrlenW (lpString=".rar") returned 4
	[0059.508] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0059.509] lstrlenW (lpString=".bz2") returned 4
	[0059.509] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0059.509] lstrlenW (lpString=".7z") returned 3
	[0059.509] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0059.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll") returned 61
	[0059.509] lstrlenW (lpString=".dbf") returned 4
	[0059.509] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0059.513] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.513] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.513] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4
	[0059.514] GetLastError () returned 0x0
	[0059.514] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x665a0, lpOverlapped=0x0) returned 1
	[0059.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0x665b0, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0x665b0, lpOverlapped=0x0) returned 1
	[0059.530] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0059.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xe6, lpOverlapped=0x0) returned 1
	[0059.530] SetEndOfFile (hFile=0x1e4) returned 1
	[0059.530] CloseHandle (hObject=0x1e4) returned 1
	[0059.531] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0059.531] SetEndOfFile (hFile=0x214) returned 1
	[0059.534] CloseHandle (hObject=0x214) returned 1
	[0059.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0059.535] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll")) returned 1
	[0059.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL") returned 72
	[0059.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL") returned 72
	[0059.535] lstrlenW (lpString=".doc") returned 4
	[0059.535] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0059.535] lstrlenW (lpString=".docx") returned 5
	[0059.535] lstrcmpiW (lpString1=".docx", lpString2="M.DLL") returned -1
	[0059.535] lstrlenW (lpString=".pdf") returned 4
	[0059.535] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0059.535] lstrlenW (lpString=".xls") returned 4
	[0059.535] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0059.535] lstrlenW (lpString=".xlsx") returned 5
	[0059.535] lstrcmpiW (lpString1=".xlsx", lpString2="M.DLL") returned -1
	[0059.535] lstrlenW (lpString=".ppt") returned 4
	[0059.535] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0059.535] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL") returned 72
	[0059.535] lstrlenW (lpString=".zip") returned 4
	[0059.535] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0059.535] lstrlenW (lpString=".rar") returned 4
	[0059.536] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0059.536] lstrlenW (lpString=".bz2") returned 4
	[0059.536] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0059.536] lstrlenW (lpString=".7z") returned 3
	[0059.536] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL") returned 72
	[0059.536] lstrlenW (lpString=".dbf") returned 4
	[0059.536] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0059.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL") returned 72
	[0059.536] lstrlenW (lpString=".1cd") returned 4
	[0059.536] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0059.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL") returned 72
	[0059.536] lstrlenW (lpString=".jpg") returned 4
	[0059.536] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0059.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL") returned 72
	[0059.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL") returned 72
	[0059.536] lstrlenW (lpString=".doc") returned 4
	[0059.536] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0059.536] lstrlenW (lpString=".docx") returned 5
	[0059.536] lstrcmpiW (lpString1=".docx", lpString2="M.DLL") returned -1
	[0059.536] lstrlenW (lpString=".pdf") returned 4
	[0059.536] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0059.536] lstrlenW (lpString=".xls") returned 4
	[0059.536] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0059.536] lstrlenW (lpString=".xlsx") returned 5
	[0059.536] lstrcmpiW (lpString1=".xlsx", lpString2="M.DLL") returned -1
	[0059.536] lstrlenW (lpString=".ppt") returned 4
	[0059.536] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0059.536] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL") returned 72
	[0059.536] lstrlenW (lpString=".zip") returned 4
	[0059.536] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0059.536] lstrlenW (lpString=".rar") returned 4
	[0059.536] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0059.537] lstrlenW (lpString=".bz2") returned 4
	[0059.537] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0059.537] lstrlenW (lpString=".7z") returned 3
	[0059.537] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0059.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL") returned 72
	[0059.537] lstrlenW (lpString=".dbf") returned 4
	[0059.537] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0059.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL") returned 72
	[0059.537] lstrlenW (lpString=".1cd") returned 4
	[0059.537] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0059.537] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL") returned 72
	[0059.537] lstrlenW (lpString=".jpg") returned 4
	[0059.537] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0059.642] lstrcmpiW (lpString1=".mui", lpString2=".beets") returned 1
	[0059.643] lstrlenW (lpString="msinfo32.exe.mui") returned 16
	[0059.643] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0059.643] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=26624) returned 1
	[0059.643] CloseHandle (hObject=0x21c) returned 1
	[0059.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20
	[0059.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0059.644] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0059.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0059.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0059.644] lstrlenW (lpString=".doc") returned 4
	[0059.644] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.644] lstrlenW (lpString=".docx") returned 5
	[0059.644] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0059.644] lstrlenW (lpString=".pdf") returned 4
	[0059.644] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.644] lstrlenW (lpString=".xls") returned 4
	[0059.644] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.644] lstrlenW (lpString=".xlsx") returned 5
	[0059.644] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0059.644] lstrlenW (lpString=".ppt") returned 4
	[0059.644] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0059.644] lstrlenW (lpString=".zip") returned 4
	[0059.644] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.644] lstrlenW (lpString=".rar") returned 4
	[0059.644] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.644] lstrlenW (lpString=".bz2") returned 4
	[0059.644] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.644] lstrlenW (lpString=".7z") returned 3
	[0059.644] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0059.644] lstrlenW (lpString=".dbf") returned 4
	[0059.645] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0059.645] lstrlenW (lpString=".1cd") returned 4
	[0059.645] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0059.645] lstrlenW (lpString=".jpg") returned 4
	[0059.645] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0059.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0059.645] lstrlenW (lpString=".doc") returned 4
	[0059.645] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0059.645] lstrlenW (lpString=".docx") returned 5
	[0059.645] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0059.645] lstrlenW (lpString=".pdf") returned 4
	[0059.645] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0059.645] lstrlenW (lpString=".xls") returned 4
	[0059.645] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0059.645] lstrlenW (lpString=".xlsx") returned 5
	[0059.645] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0059.645] lstrlenW (lpString=".ppt") returned 4
	[0059.645] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0059.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0059.645] lstrlenW (lpString=".zip") returned 4
	[0059.645] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0059.645] lstrlenW (lpString=".rar") returned 4
	[0059.645] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0059.645] lstrlenW (lpString=".bz2") returned 4
	[0059.645] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0059.645] lstrlenW (lpString=".7z") returned 3
	[0059.645] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0059.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0059.645] lstrlenW (lpString=".dbf") returned 4
	[0059.646] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0059.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0059.646] lstrlenW (lpString=".1cd") returned 4
	[0059.646] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0059.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0059.646] lstrlenW (lpString=".jpg") returned 4
	[0059.646] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0059.646] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0059.646] lstrlenW (lpString="MSSOAPR3.DLL") returned 12
	[0059.646] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0060.534] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=41864) returned 1
	[0060.534] CloseHandle (hObject=0x1f8) returned 1
	[0060.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll")) returned 0x20
	[0060.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0060.540] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0060.542] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.542] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.542] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0060.543] GetLastError () returned 0x0
	[0060.543] ReadFile (in: hFile=0x238, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xa388, lpOverlapped=0x0) returned 1
	[0060.545] WriteFile (in: hFile=0x1f8, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xa390, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xa390, lpOverlapped=0x0) returned 1
	[0060.547] ReadFile (in: hFile=0x238, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0060.547] WriteFile (in: hFile=0x1f8, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0060.547] SetEndOfFile (hFile=0x1f8) returned 1
	[0060.547] CloseHandle (hObject=0x1f8) returned 1
	[0060.547] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.547] SetEndOfFile (hFile=0x238) returned 1
	[0060.548] CloseHandle (hObject=0x238) returned 1
	[0060.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.549] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll")) returned 1
	[0060.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL") returned 73
	[0060.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL") returned 73
	[0060.549] lstrlenW (lpString=".doc") returned 4
	[0060.549] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.549] lstrlenW (lpString=".docx") returned 5
	[0060.549] lstrcmpiW (lpString1=".docx", lpString2="3.DLL") returned -1
	[0060.549] lstrlenW (lpString=".pdf") returned 4
	[0060.549] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.549] lstrlenW (lpString=".xls") returned 4
	[0060.549] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.549] lstrlenW (lpString=".xlsx") returned 5
	[0060.549] lstrcmpiW (lpString1=".xlsx", lpString2="3.DLL") returned -1
	[0060.549] lstrlenW (lpString=".ppt") returned 4
	[0060.549] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL") returned 73
	[0060.549] lstrlenW (lpString=".zip") returned 4
	[0060.549] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.549] lstrlenW (lpString=".rar") returned 4
	[0060.549] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.549] lstrlenW (lpString=".bz2") returned 4
	[0060.550] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.550] lstrlenW (lpString=".7z") returned 3
	[0060.550] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL") returned 73
	[0060.550] lstrlenW (lpString=".dbf") returned 4
	[0060.550] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL") returned 73
	[0060.550] lstrlenW (lpString=".1cd") returned 4
	[0060.550] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL") returned 73
	[0060.550] lstrlenW (lpString=".jpg") returned 4
	[0060.550] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL") returned 73
	[0060.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL") returned 73
	[0060.550] lstrlenW (lpString=".doc") returned 4
	[0060.550] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.550] lstrlenW (lpString=".docx") returned 5
	[0060.550] lstrcmpiW (lpString1=".docx", lpString2="3.DLL") returned -1
	[0060.550] lstrlenW (lpString=".pdf") returned 4
	[0060.550] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.550] lstrlenW (lpString=".xls") returned 4
	[0060.550] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.550] lstrlenW (lpString=".xlsx") returned 5
	[0060.550] lstrcmpiW (lpString1=".xlsx", lpString2="3.DLL") returned -1
	[0060.550] lstrlenW (lpString=".ppt") returned 4
	[0060.550] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL") returned 73
	[0060.550] lstrlenW (lpString=".zip") returned 4
	[0060.550] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.550] lstrlenW (lpString=".rar") returned 4
	[0060.550] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.550] lstrlenW (lpString=".bz2") returned 4
	[0060.550] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.551] lstrlenW (lpString=".7z") returned 3
	[0060.551] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL") returned 73
	[0060.551] lstrlenW (lpString=".dbf") returned 4
	[0060.551] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL") returned 73
	[0060.551] lstrlenW (lpString=".1cd") returned 4
	[0060.551] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL") returned 73
	[0060.551] lstrlenW (lpString=".jpg") returned 4
	[0060.551] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.551] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0060.551] lstrlenW (lpString="ACECORE.DLL") returned 11
	[0060.551] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0060.552] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=3213192) returned 1
	[0060.552] CloseHandle (hObject=0x238) returned 1
	[0060.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll")) returned 0x20
	[0060.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0060.553] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0060.553] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0060.553] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0060.553] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0060.553] ReadFile (in: hFile=0x238, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0060.557] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x1057d8, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0060.557] ReadFile (in: hFile=0x238, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0060.568] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0060.568] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x2d0788, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0060.568] ReadFile (in: hFile=0x238, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0060.706] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.706] WriteFile (in: hFile=0x238, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc0102, lpOverlapped=0x0) returned 1
	[0060.723] SetEndOfFile (hFile=0x238) returned 1
	[0060.723] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) returned 0x8dbd150
	[0060.865] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0060.865] WriteFile (in: hFile=0x238, lpBuffer=0x8dbd150*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8dbd150*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0060.867] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x1057d8, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0060.867] WriteFile (in: hFile=0x238, lpBuffer=0x8dbd150*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8dbd150*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0060.871] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x2d0788, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc7c | out: lpNewFilePointer=0x0) returned 1
	[0060.871] WriteFile (in: hFile=0x238, lpBuffer=0x8dbd150*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x86cfc88, lpOverlapped=0x0 | out: lpBuffer=0x8dbd150*, lpNumberOfBytesWritten=0x86cfc88*=0x40000, lpOverlapped=0x0) returned 1
	[0060.876] HeapFree (in: hHeap=0x5350000, dwFlags=0x0, lpMem=0x8dbd150 | out: hHeap=0x5350000) returned 1
	[0060.876] CloseHandle (hObject=0x238) returned 1
	[0060.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0060.877] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL") returned 67
	[0060.877] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL") returned 67
	[0060.877] lstrlenW (lpString=".doc") returned 4
	[0060.877] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.877] lstrlenW (lpString=".docx") returned 5
	[0060.877] lstrcmpiW (lpString1=".docx", lpString2="E.DLL") returned -1
	[0060.877] lstrlenW (lpString=".pdf") returned 4
	[0060.877] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.877] lstrlenW (lpString=".xls") returned 4
	[0060.877] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.877] lstrlenW (lpString=".xlsx") returned 5
	[0060.877] lstrcmpiW (lpString1=".xlsx", lpString2="E.DLL") returned -1
	[0060.877] lstrlenW (lpString=".ppt") returned 4
	[0060.877] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.877] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL") returned 67
	[0060.877] lstrlenW (lpString=".zip") returned 4
	[0060.877] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.877] lstrlenW (lpString=".rar") returned 4
	[0060.877] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.877] lstrlenW (lpString=".bz2") returned 4
	[0060.877] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.877] lstrlenW (lpString=".7z") returned 3
	[0060.877] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.877] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL") returned 67
	[0060.877] lstrlenW (lpString=".dbf") returned 4
	[0060.877] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.877] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL") returned 67
	[0060.877] lstrlenW (lpString=".1cd") returned 4
	[0060.877] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.877] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL") returned 67
	[0060.877] lstrlenW (lpString=".jpg") returned 4
	[0060.877] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL") returned 67
	[0060.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL") returned 67
	[0060.878] lstrlenW (lpString=".doc") returned 4
	[0060.878] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0060.878] lstrlenW (lpString=".docx") returned 5
	[0060.878] lstrcmpiW (lpString1=".docx", lpString2="E.DLL") returned -1
	[0060.878] lstrlenW (lpString=".pdf") returned 4
	[0060.878] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0060.878] lstrlenW (lpString=".xls") returned 4
	[0060.878] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0060.878] lstrlenW (lpString=".xlsx") returned 5
	[0060.878] lstrcmpiW (lpString1=".xlsx", lpString2="E.DLL") returned -1
	[0060.878] lstrlenW (lpString=".ppt") returned 4
	[0060.878] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0060.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL") returned 67
	[0060.878] lstrlenW (lpString=".zip") returned 4
	[0060.878] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0060.878] lstrlenW (lpString=".rar") returned 4
	[0060.878] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0060.878] lstrlenW (lpString=".bz2") returned 4
	[0060.878] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0060.878] lstrlenW (lpString=".7z") returned 3
	[0060.878] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0060.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL") returned 67
	[0060.878] lstrlenW (lpString=".dbf") returned 4
	[0060.878] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0060.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL") returned 67
	[0060.878] lstrlenW (lpString=".1cd") returned 4
	[0060.878] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0060.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL") returned 67
	[0060.878] lstrlenW (lpString=".jpg") returned 4
	[0060.878] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0060.879] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0060.879] lstrlenW (lpString="ACEEXCL.DLL") returned 11
	[0060.879] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0060.879] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=899992) returned 1
	[0060.879] CloseHandle (hObject=0x238) returned 1
	[0060.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll")) returned 0x20
	[0060.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0060.879] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0060.879] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.879] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0060.879] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0060.880] GetLastError () returned 0x0
	[0060.880] ReadFile (in: hFile=0x238, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xdbb98, lpOverlapped=0x0) returned 1
	[0060.913] WriteFile (in: hFile=0x194, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xdbba0, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xdbba0, lpOverlapped=0x0) returned 1
	[0061.201] ReadFile (in: hFile=0x238, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0061.201] WriteFile (in: hFile=0x194, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xea, lpOverlapped=0x0) returned 1
	[0061.201] SetEndOfFile (hFile=0x194) returned 1
	[0061.201] CloseHandle (hObject=0x194) returned 1
	[0061.202] SetFilePointerEx (in: hFile=0x238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0061.202] SetEndOfFile (hFile=0x238) returned 1
	[0061.209] CloseHandle (hObject=0x238) returned 1
	[0061.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0061.210] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll")) returned 1
	[0061.651] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL") returned 67
	[0061.651] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL") returned 67
	[0061.651] lstrlenW (lpString=".doc") returned 4
	[0061.651] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0061.651] lstrlenW (lpString=".docx") returned 5
	[0061.651] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1
	[0061.651] lstrlenW (lpString=".pdf") returned 4
	[0061.651] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0061.651] lstrlenW (lpString=".xls") returned 4
	[0061.651] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0061.651] lstrlenW (lpString=".xlsx") returned 5
	[0061.651] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1
	[0061.651] lstrlenW (lpString=".ppt") returned 4
	[0061.651] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0061.651] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL") returned 67
	[0061.651] lstrlenW (lpString=".zip") returned 4
	[0061.651] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0061.651] lstrlenW (lpString=".rar") returned 4
	[0061.651] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0061.651] lstrlenW (lpString=".bz2") returned 4
	[0061.651] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0061.651] lstrlenW (lpString=".7z") returned 3
	[0061.652] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0061.652] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL") returned 67
	[0061.652] lstrlenW (lpString=".dbf") returned 4
	[0061.652] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0061.652] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL") returned 67
	[0061.652] lstrlenW (lpString=".1cd") returned 4
	[0061.652] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0061.652] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL") returned 67
	[0061.652] lstrlenW (lpString=".jpg") returned 4
	[0061.652] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0061.652] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL") returned 67
	[0061.652] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL") returned 67
	[0061.652] lstrlenW (lpString=".doc") returned 4
	[0061.652] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0061.652] lstrlenW (lpString=".docx") returned 5
	[0061.652] lstrcmpiW (lpString1=".docx", lpString2="L.DLL") returned -1
	[0061.652] lstrlenW (lpString=".pdf") returned 4
	[0061.652] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0061.652] lstrlenW (lpString=".xls") returned 4
	[0061.652] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0061.652] lstrlenW (lpString=".xlsx") returned 5
	[0061.652] lstrcmpiW (lpString1=".xlsx", lpString2="L.DLL") returned -1
	[0061.652] lstrlenW (lpString=".ppt") returned 4
	[0061.652] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0061.652] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL") returned 67
	[0061.652] lstrlenW (lpString=".zip") returned 4
	[0061.652] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0061.652] lstrlenW (lpString=".rar") returned 4
	[0061.652] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0061.652] lstrlenW (lpString=".bz2") returned 4
	[0061.652] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0061.653] lstrlenW (lpString=".7z") returned 3
	[0061.653] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0061.653] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL") returned 67
	[0061.653] lstrlenW (lpString=".dbf") returned 4
	[0061.653] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0061.653] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL") returned 67
	[0061.653] lstrlenW (lpString=".1cd") returned 4
	[0061.653] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0061.653] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL") returned 67
	[0061.653] lstrlenW (lpString=".jpg") returned 4
	[0061.653] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0061.653] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0061.653] lstrlenW (lpString="ACEODTXT.DLL") returned 12
	[0061.653] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0062.682] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=15800) returned 1
	[0062.683] CloseHandle (hObject=0x214) returned 1
	[0062.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll")) returned 0x20
	[0062.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0062.683] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0062.683] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.683] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.683] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0062.684] GetLastError () returned 0x0
	[0062.684] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x3db8, lpOverlapped=0x0) returned 1
	[0062.688] WriteFile (in: hFile=0x208, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0x3dc0, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0x3dc0, lpOverlapped=0x0) returned 1
	[0062.689] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.689] WriteFile (in: hFile=0x208, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xec, lpOverlapped=0x0) returned 1
	[0062.689] SetEndOfFile (hFile=0x208) returned 1
	[0062.690] CloseHandle (hObject=0x208) returned 1
	[0062.690] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.690] SetEndOfFile (hFile=0x214) returned 1
	[0062.691] CloseHandle (hObject=0x214) returned 1
	[0062.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.691] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll")) returned 1
	[0062.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL") returned 68
	[0062.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL") returned 68
	[0062.691] lstrlenW (lpString=".doc") returned 4
	[0062.691] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0062.691] lstrlenW (lpString=".docx") returned 5
	[0062.691] lstrcmpiW (lpString1=".docx", lpString2="T.DLL") returned -1
	[0062.691] lstrlenW (lpString=".pdf") returned 4
	[0062.691] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0062.691] lstrlenW (lpString=".xls") returned 4
	[0062.691] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0062.691] lstrlenW (lpString=".xlsx") returned 5
	[0062.692] lstrcmpiW (lpString1=".xlsx", lpString2="T.DLL") returned -1
	[0062.692] lstrlenW (lpString=".ppt") returned 4
	[0062.692] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0062.692] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL") returned 68
	[0062.692] lstrlenW (lpString=".zip") returned 4
	[0062.692] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0062.692] lstrlenW (lpString=".rar") returned 4
	[0062.692] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0062.692] lstrlenW (lpString=".bz2") returned 4
	[0062.692] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0062.692] lstrlenW (lpString=".7z") returned 3
	[0062.692] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0062.692] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL") returned 68
	[0062.692] lstrlenW (lpString=".dbf") returned 4
	[0062.692] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0062.692] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL") returned 68
	[0062.692] lstrlenW (lpString=".1cd") returned 4
	[0062.692] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0062.692] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL") returned 68
	[0062.692] lstrlenW (lpString=".jpg") returned 4
	[0062.692] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0062.692] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL") returned 68
	[0062.692] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL") returned 68
	[0062.692] lstrlenW (lpString=".doc") returned 4
	[0062.692] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0062.692] lstrlenW (lpString=".docx") returned 5
	[0062.692] lstrcmpiW (lpString1=".docx", lpString2="T.DLL") returned -1
	[0062.692] lstrlenW (lpString=".pdf") returned 4
	[0062.692] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0062.692] lstrlenW (lpString=".xls") returned 4
	[0062.692] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0062.692] lstrlenW (lpString=".xlsx") returned 5
	[0062.693] lstrcmpiW (lpString1=".xlsx", lpString2="T.DLL") returned -1
	[0062.693] lstrlenW (lpString=".ppt") returned 4
	[0062.693] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0062.693] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL") returned 68
	[0062.693] lstrlenW (lpString=".zip") returned 4
	[0062.693] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0062.693] lstrlenW (lpString=".rar") returned 4
	[0062.693] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0062.693] lstrlenW (lpString=".bz2") returned 4
	[0062.693] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0062.693] lstrlenW (lpString=".7z") returned 3
	[0062.693] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0062.693] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL") returned 68
	[0062.693] lstrlenW (lpString=".dbf") returned 4
	[0062.693] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0062.693] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL") returned 68
	[0062.693] lstrlenW (lpString=".1cd") returned 4
	[0062.693] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0062.693] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL") returned 68
	[0062.693] lstrlenW (lpString=".jpg") returned 4
	[0062.693] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0062.693] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0062.693] lstrlenW (lpString="ACERCLR.DLL") returned 11
	[0062.693] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0062.700] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=55744) returned 1
	[0062.700] CloseHandle (hObject=0x214) returned 1
	[0062.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll")) returned 0x20
	[0062.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0062.700] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0062.700] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.701] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.701] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0062.701] GetLastError () returned 0x0
	[0062.701] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xd9c0, lpOverlapped=0x0) returned 1
	[0062.708] WriteFile (in: hFile=0x208, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xd9d0, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xd9d0, lpOverlapped=0x0) returned 1
	[0062.709] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.709] WriteFile (in: hFile=0x208, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xea, lpOverlapped=0x0) returned 1
	[0062.709] SetEndOfFile (hFile=0x208) returned 1
	[0062.709] CloseHandle (hObject=0x208) returned 1
	[0062.710] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.710] SetEndOfFile (hFile=0x214) returned 1
	[0062.711] CloseHandle (hObject=0x214) returned 1
	[0062.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0062.711] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll")) returned 1
	[0062.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL") returned 67
	[0062.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL") returned 67
	[0062.711] lstrlenW (lpString=".doc") returned 4
	[0062.711] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0062.711] lstrlenW (lpString=".docx") returned 5
	[0062.711] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1
	[0062.711] lstrlenW (lpString=".pdf") returned 4
	[0062.711] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0062.711] lstrlenW (lpString=".xls") returned 4
	[0062.711] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0062.711] lstrlenW (lpString=".xlsx") returned 5
	[0062.711] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1
	[0062.711] lstrlenW (lpString=".ppt") returned 4
	[0062.711] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0062.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL") returned 67
	[0062.712] lstrlenW (lpString=".zip") returned 4
	[0062.712] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0062.712] lstrlenW (lpString=".rar") returned 4
	[0062.712] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0062.712] lstrlenW (lpString=".bz2") returned 4
	[0062.712] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0062.712] lstrlenW (lpString=".7z") returned 3
	[0062.712] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0062.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL") returned 67
	[0062.712] lstrlenW (lpString=".dbf") returned 4
	[0062.712] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0062.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL") returned 67
	[0062.712] lstrlenW (lpString=".1cd") returned 4
	[0062.712] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0062.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL") returned 67
	[0062.712] lstrlenW (lpString=".jpg") returned 4
	[0062.712] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0062.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL") returned 67
	[0062.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL") returned 67
	[0062.712] lstrlenW (lpString=".doc") returned 4
	[0062.712] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0062.712] lstrlenW (lpString=".docx") returned 5
	[0062.712] lstrcmpiW (lpString1=".docx", lpString2="R.DLL") returned -1
	[0062.712] lstrlenW (lpString=".pdf") returned 4
	[0062.712] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0062.712] lstrlenW (lpString=".xls") returned 4
	[0062.712] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0062.712] lstrlenW (lpString=".xlsx") returned 5
	[0062.712] lstrcmpiW (lpString1=".xlsx", lpString2="R.DLL") returned -1
	[0062.712] lstrlenW (lpString=".ppt") returned 4
	[0062.712] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0062.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL") returned 67
	[0062.713] lstrlenW (lpString=".zip") returned 4
	[0062.713] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0062.713] lstrlenW (lpString=".rar") returned 4
	[0062.713] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0062.713] lstrlenW (lpString=".bz2") returned 4
	[0062.713] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0062.713] lstrlenW (lpString=".7z") returned 3
	[0062.713] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0062.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL") returned 67
	[0062.713] lstrlenW (lpString=".dbf") returned 4
	[0062.713] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0062.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL") returned 67
	[0062.713] lstrlenW (lpString=".1cd") returned 4
	[0062.713] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0062.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL") returned 67
	[0062.713] lstrlenW (lpString=".jpg") returned 4
	[0062.713] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0062.713] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0062.713] lstrlenW (lpString="ACEREP.DLL") returned 10
	[0062.713] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0062.714] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=691616) returned 1
	[0062.714] CloseHandle (hObject=0x214) returned 1
	[0062.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll")) returned 0x20
	[0062.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0062.714] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0062.714] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.714] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0062.714] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0062.714] GetLastError () returned 0x0
	[0062.714] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0xa8da0, lpOverlapped=0x0) returned 1
	[0062.730] WriteFile (in: hFile=0x208, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xa8db0, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xa8db0, lpOverlapped=0x0) returned 1
	[0062.964] ReadFile (in: hFile=0x214, lpBuffer=0x8e50020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x86cfed4, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesRead=0x86cfed4*=0x0, lpOverlapped=0x0) returned 1
	[0062.965] WriteFile (in: hFile=0x208, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x86cfc9c, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfc9c*=0xe8, lpOverlapped=0x0) returned 1
	[0062.965] SetEndOfFile (hFile=0x208) returned 1
	[0063.530] CloseHandle (hObject=0x208) returned 1
	[0063.530] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.530] SetEndOfFile (hFile=0x214) returned 1
	[0063.567] CloseHandle (hObject=0x214) returned 1
	[0063.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL.id-9C354B42.[bigmacbig@cock.li].beets", dwFileAttributes=0x20) returned 1
	[0063.567] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll")) returned 1
	[0063.567] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL") returned 66
	[0063.567] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL") returned 66
	[0063.567] lstrlenW (lpString=".doc") returned 4
	[0063.567] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0063.567] lstrlenW (lpString=".docx") returned 5
	[0063.568] lstrcmpiW (lpString1=".docx", lpString2="P.DLL") returned -1
	[0063.568] lstrlenW (lpString=".pdf") returned 4
	[0063.568] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0063.568] lstrlenW (lpString=".xls") returned 4
	[0063.568] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0063.568] lstrlenW (lpString=".xlsx") returned 5
	[0063.568] lstrcmpiW (lpString1=".xlsx", lpString2="P.DLL") returned -1
	[0063.568] lstrlenW (lpString=".ppt") returned 4
	[0063.568] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0063.568] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL") returned 66
	[0063.568] lstrlenW (lpString=".zip") returned 4
	[0063.568] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0063.568] lstrlenW (lpString=".rar") returned 4
	[0063.568] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0063.568] lstrlenW (lpString=".bz2") returned 4
	[0063.568] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0063.568] lstrlenW (lpString=".7z") returned 3
	[0063.568] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0063.568] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL") returned 66
	[0063.568] lstrlenW (lpString=".dbf") returned 4
	[0063.568] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0063.568] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL") returned 66
	[0063.568] lstrlenW (lpString=".1cd") returned 4
	[0063.568] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0063.568] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL") returned 66
	[0063.568] lstrlenW (lpString=".jpg") returned 4
	[0063.568] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0063.568] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL") returned 66
	[0063.568] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL") returned 66
	[0063.568] lstrlenW (lpString=".doc") returned 4
	[0063.568] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0063.568] lstrlenW (lpString=".docx") returned 5
	[0063.569] lstrcmpiW (lpString1=".docx", lpString2="P.DLL") returned -1
	[0063.569] lstrlenW (lpString=".pdf") returned 4
	[0063.569] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0063.569] lstrlenW (lpString=".xls") returned 4
	[0063.569] lstrcmpiW (lpString1=".xls", lpString2=".DLL") returned 1
	[0063.569] lstrlenW (lpString=".xlsx") returned 5
	[0063.569] lstrcmpiW (lpString1=".xlsx", lpString2="P.DLL") returned -1
	[0063.569] lstrlenW (lpString=".ppt") returned 4
	[0063.569] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0063.569] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL") returned 66
	[0063.569] lstrlenW (lpString=".zip") returned 4
	[0063.569] lstrcmpiW (lpString1=".zip", lpString2=".DLL") returned 1
	[0063.569] lstrlenW (lpString=".rar") returned 4
	[0063.569] lstrcmpiW (lpString1=".rar", lpString2=".DLL") returned 1
	[0063.569] lstrlenW (lpString=".bz2") returned 4
	[0063.569] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0063.569] lstrlenW (lpString=".7z") returned 3
	[0063.569] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0063.569] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL") returned 66
	[0063.569] lstrlenW (lpString=".dbf") returned 4
	[0063.569] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0063.569] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL") returned 66
	[0063.569] lstrlenW (lpString=".1cd") returned 4
	[0063.569] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0063.569] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL") returned 66
	[0063.569] lstrlenW (lpString=".jpg") returned 4
	[0063.569] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0063.569] lstrcmpiW (lpString1=".DLL", lpString2=".beets") returned 1
	[0063.569] lstrlenW (lpString="ACEWDAT.DLL") returned 11
	[0063.570] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0063.570] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x86cff1c | out: lpFileSize=0x86cff1c*=3050912) returned 1
	[0063.570] CloseHandle (hObject=0x214) returned 1
	[0063.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll")) returned 0x20
	[0063.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 0xffffffff
	[0063.570] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll.id-9c354b42.[bigmacbig@cock.li].beets")) returned 1
	[0063.571] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL.id-9C354B42.[bigmacbig@cock.li].beets" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll.id-9c354b42.[bigmacbig@cock.li].beets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0063.571] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0x0) returned 1
	[0063.571] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0063.571] ReadFile (in: hFile=0x214, lpBuffer=0x8e50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e50058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0063.574] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0xf848a, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0063.574] ReadFile (in: hFile=0x214, lpBuffer=0x8e90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8e90058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0063.580] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x86cfc6c | out: lpNewFilePointer=0xffffffff) returned 1
	[0063.580] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x2a8da0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfc2c | out: lpNewFilePointer=0x0) returned 1
	[0063.581] ReadFile (in: hFile=0x214, lpBuffer=0x8ed0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x86cfc38, lpOverlapped=0x0 | out: lpBuffer=0x8ed0058*, lpNumberOfBytesRead=0x86cfc38*=0x40000, lpOverlapped=0x0) returned 1
	[0063.597] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x86cfec8 | out: lpNewFilePointer=0x0) returned 1
	[0063.597] WriteFile (in: hFile=0x214, lpBuffer=0x8e50020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x86cfcb0, lpOverlapped=0x0 | out: lpBuffer=0x8e50020*, lpNumberOfBytesWritten=0x86cfcb0*=0xc0102, lpOverlapped=0x0) returned 1
	[0063.757] SetEndOfFile (hFile=0x214) returned 1
	[0063.757] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x40000) 

Thread:
	id = 19
	os_tid = 0xa5c

	[0035.842] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x8c70058
	[0035.842] lstrlenW (lpString="C:") returned 2
	[0035.842] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x891fd00 | out: lpFindFileData=0x891fd00*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1002f, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x53e8840
	[0035.842] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15
	[0035.842] lstrcmpiW (lpString1="C:\\Windows", lpString2="C:\\$Recycle.Bin") returned 1
	[0035.842] lstrlenW (lpString="$Recycle.Bin") returned 12
	[0035.842] lstrcmpiW (lpString1="C:\\Windows", lpString2="$Recycle.Bin") returned 1
	[0035.842] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x8c80060
	[0035.843] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15
	[0035.843] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x891fa84 | out: lpFindFileData=0x891fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x53e8880
	[0035.843] FindNextFileW (in: hFindFile=0x53e8880, lpFindFileData=0x891fa84 | out: lpFindFileData=0x891fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.843] FindNextFileW (in: hFindFile=0x53e8880, lpFindFileData=0x891fa84 | out: lpFindFileData=0x891fa84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaa5dd50, ftLastAccessTime.dwHighDateTime=0x1d52be5, ftLastWriteTime.dwLowDateTime=0xdaa5dd50, ftLastWriteTime.dwHighDateTime=0x1d52be5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0035.843] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 62
	[0035.843] lstrcmpiW (lpString1="C:\\Windows", lpString2="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 1
	[0035.843] lstrlenW (lpString="S-1-5-21-3388679973-3930757225-3770151564-1000") returned 46
	[0035.843] lstrcmpiW (lpString1="C:\\Windows", lpString2="S-1-5-21-3388679973-3930757225-3770151564-1000") returned -1
	[0035.843] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0xfffe) returned 0x8c90068
	[0035.844] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 62
	[0035.844] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x891f808 | out: lpFindFileData=0x891f808*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaa5dd50, ftLastAccessTime.dwHighDateTime=0x1d52be5, ftLastWriteTime.dwLowDateTime=0xdaa83eb0, ftLastWriteTime.dwHighDateTime=0x1d52be5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x53e88c0
	[0035.844] FindNextFileW (in: hFindFile=0x53e88c0, lpFindFileData=0x891f808 | out: lpFindFileData=0x891f808*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaa5dd50, ftLastAccessTime.dwHighDateTime=0x1d52be5, ftLastWriteTime.dwLowDateTime=0xdaa83eb0, ftLastWriteTime.dwHighDateTime=0x1d52be5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0035.844] FindNextFileW (in: hFindFile=0x53e88c0, lpFindFileData=0x891f808 | out: lpFindFileData=0x891f808*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdaa5dd50, ftCreationTime.dwHighDateTime=0x1d52be5, ftLastAccessTime.dwLowDateTime=0xdaa5dd50, ftLastAccessTime.dwHighDateTime=0x1d52be5, ftLastWriteTime.dwLowDateTime=0xdaa83eb0, ftLastWriteTime.dwHighDateTime=0x1d52be5, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-9C354B42.[bigmacbig@cock.li].beets", cAlternateFileName="DESKTO~1.BEE")) returned 1
	[0035.844] lstrlenW (lpString="desktop.ini.id-9C354B42.[bigmacbig@cock.li].beets") returned 49
	[0035.844] lstrlenW (lpString=".1cd") returned 4
	[0035.844] lstrcmpiW (lpString1=".1cd", lpString2="eets") returned -1
	[0035.844] lstrlenW (lpString=".3ds") returned 4
	[0035.844] lstrcmpiW (lpString1=".3ds", lpString2="eets") returned -1
	[0035.844] lstrlenW (lpString=".3fr") returned 4
	[0035.844] lstrcmpiW (lpString1=".3fr", lpString2="eets") returned -1
	[0035.844] lstrlenW (lpString=".3g2") returned 4
	[0035.844] lstrcmpiW (lpString1=".3g2", lpString2="eets") returned -1
	[0035.844] lstrlenW (lpString=".3gp") returned 4
	[0035.844] lstrcmpiW (lpString1=".3gp", lpString2="eets") returned -1
	[0035.844] lstrlenW (lpString=".7z") returned 3
	[0035.844] lstrcmpiW (lpString1=".7z", lpString2="ets") returned -1
	[0035.844] lstrlenW (lpString=".accda") returned 6
	[0035.844] lstrcmpiW (lpString1=".accda", lpString2=".beets") returned -1
	[0035.844] lstrlenW (lpString=".accdb") returned 6
	[0035.844] lstrcmpiW (lpString1=".accdb", lpString2=".beets") returned -1
	[0035.844] lstrlenW (lpString=".accdc") returned 6
	[0035.844] lstrcmpiW (lpString1=".accdc", lpString2=".beets") returned -1
	[0035.844] lstrlenW (lpString=".accde") returned 6
	[0035.845] lstrcmpiW (lpString1=".accde", lpString2=".beets") returned -1
	[0035.845] lstrlenW (lpString=".accdt") returned 6
	[0035.845] lstrcmpiW (lpString1=".accdt", lpString2=".beets") returned -1
	[0035.845] lstrlenW (lpString=".accdw") returned 6
	[0035.845] lstrcmpiW (lpString1=".accdw", lpString2=".beets") returned -1
	[0035.845] lstrlenW (lpString=".adb") returned 4
	[0035.845] lstrcmpiW (lpString1=".adb", lpString2="eets") returned -1
	[0035.845] lstrlenW (lpString=".adp") returned 4
	[0035.845] lstrcmpiW (lpString1=".adp", lpString2="eets") returned -1
	[0035.845] lstrlenW (lpString=".ai") returned 3
	[0035.845] lstrcmpiW (lpString1=".ai", lpString2="ets") returned -1
	[0035.845] lstrlenW (lpString=".ai3") returned 4
	[0035.845] lstrcmpiW (lpString1=".ai3", lpString2="eets") returned -1
	[0035.845] lstrlenW (lpString=".ai4") returned 4
	[0035.845] lstrcmpiW (lpString1=".ai4", lpString2="eets") returned -1
	[0035.845] lstrlenW (lpString=".ai5") returned 4
	[0035.845] lstrcmpiW (lpString1=".ai5", lpString2="eets") returned -1
	[0035.845] lstrlenW (lpString=".ai6") returned 4
	[0035.845] lstrcmpiW (lpString1=".ai6", lpString2="eets") returned -1
	[0035.845] lstrlenW (lpString=".ai7") returned 4
	[0035.845] lstrcmpiW (lpString1=".ai7", lpString2="eets") returned -1
	[0035.845] lstrlenW (lpString=".ai8") returned 4
	[0035.845] lstrcmpiW (lpString1=".ai8", lpString2="eets") returned -1
	[0035.845] lstrlenW (lpString=".anim") returned 5
	[0035.845] lstrcmpiW (lpString1=".anim", lpString2="beets") returned -1
	[0035.845] lstrlenW (lpString=".arw") returned 4
	[0035.845] lstrcmpiW (lpString1=".arw", lpString2="eets") returned -1
	[0035.845] lstrlenW (lpString=".as") returned 3
	[0035.845] lstrcmpiW (lpString1=".as", lpString2="ets") returned -1
	[0035.845] lstrlenW (lpString=".asa") returned 4
	[0035.845] lstrcmpiW (lpString1=".asa", lpString2="eets") returned -1
	[0035.845] lstrlenW (lpString=".asc") returned 4
	[0035.845] lstrcmpiW (lpString1=".asc", lpString2="eets") returned -1
	[0035.845] lstrlenW (lpString=".ascx") returned 5
	[0035.846] lstrcmpiW (lpString1=".ascx", lpString2="beets") returned -1
	[0035.846] lstrlenW (lpString=".asm") returned 4
	[0035.846] lstrcmpiW (lpString1=".asm", lpString2="eets") returned -1
	[0035.846] lstrlenW (lpString=".asmx") returned 5
	[0035.846] lstrcmpiW (lpString1=".asmx", lpString2="beets") returned -1
	[0035.846] lstrlenW (lpString=".asp") returned 4
	[0035.846] lstrcmpiW (lpString1=".asp", lpString2="eets") returned -1
	[0035.846] lstrlenW (lpString=".aspx") returned 5
	[0035.846] lstrcmpiW (lpString1=".aspx", lpString2="beets") returned -1
	[0035.846] lstrlenW (lpString=".asr") returned 4
	[0035.846] lstrcmpiW (lpString1=".asr", lpString2="eets") returned -1
	[0035.846] lstrlenW (lpString=".asx") returned 4
	[0035.846] lstrcmpiW (lpString1=".asx", lpString2="eets") returned -1
	[0035.846] lstrlenW (lpString=".avi") returned 4
	[0035.846] lstrcmpiW (lpString1=".avi", lpString2="eets") returned -1
	[0035.846] lstrlenW (lpString=".avs") returned 4
	[0035.846] lstrcmpiW (lpString1=".avs", lpString2="eets") returned -1
	[0035.846] lstrlenW (lpString=".backup") returned 7
	[0035.846] lstrcmpiW (lpString1=".backup", lpString2="].beets") returned -1
	[0035.846] lstrlenW (lpString=".bak") returned 4
	[0035.846] lstrcmpiW (lpString1=".bak", lpString2="eets") returned -1
	[0035.846] lstrlenW (lpString=".bay") returned 4
	[0035.846] lstrcmpiW (lpString1=".bay", lpString2="eets") returned -1
	[0035.846] lstrlenW (lpString=".bd") returned 3
	[0035.846] lstrcmpiW (lpString1=".bd", lpString2="ets") returned -1
	[0035.846] lstrlenW (lpString=".bin") returned 4
	[0035.846] lstrcmpiW (lpString1=".bin", lpString2="eets") returned -1
	[0035.846] lstrlenW (lpString=".bmp") returned 4
	[0035.846] lstrcmpiW (lpString1=".bmp", lpString2="eets") returned -1
	[0035.846] lstrlenW (lpString=".bz2") returned 4
	[0035.846] lstrcmpiW (lpString1=".bz2", lpString2="eets") returned -1
	[0035.846] lstrlenW (lpString=".c") returned 2
	[0035.846] lstrcmpiW (lpString1=".c", lpString2="ts") returned -1
	[0035.846] lstrlenW (lpString=".cdr") returned 4
	[0035.846] lstrcmpiW (lpString1=".cdr", lpString2="eets") returned -1
	[0035.847] lstrlenW (lpString=".cer") returned 4
	[0035.847] lstrcmpiW (lpString1=".cer", lpString2="eets") returned -1
	[0035.847] lstrlenW (lpString=".cf") returned 3
	[0035.847] lstrcmpiW (lpString1=".cf", lpString2="ets") returned -1
	[0035.847] lstrlenW (lpString=".cfc") returned 4
	[0035.847] lstrcmpiW (lpString1=".cfc", lpString2="eets") returned -1
	[0035.847] lstrlenW (lpString=".cfm") returned 4
	[0035.847] lstrcmpiW (lpString1=".cfm", lpString2="eets") returned -1
	[0035.847] lstrlenW (lpString=".cfml") returned 5
	[0035.847] lstrcmpiW (lpString1=".cfml", lpString2="beets") returned -1
	[0035.847] lstrlenW (lpString=".cfu") returned 4
	[0035.847] lstrcmpiW (lpString1=".cfu", lpString2="eets") returned -1
	[0035.847] lstrlenW (lpString=".chm") returned 4
	[0035.847] lstrcmpiW (lpString1=".chm", lpString2="eets") returned -1
	[0035.847] lstrlenW (lpString=".cin") returned 4
	[0035.847] lstrcmpiW (lpString1=".cin", lpString2="eets") returned -1
	[0035.847] lstrlenW (lpString=".class") returned 6
	[0035.847] lstrcmpiW (lpString1=".class", lpString2=".beets") returned 1
	[0035.847] lstrlenW (lpString=".clx") returned 4
	[0035.847] lstrcmpiW (lpString1=".clx", lpString2="eets") returned -1
	[0035.847] lstrlenW (lpString=".config") returned 7
	[0035.847] lstrcmpiW (lpString1=".config", lpString2="].beets") returned -1
	[0035.847] lstrlenW (lpString=".cpp") returned 4
	[0035.847] lstrcmpiW (lpString1=".cpp", lpString2="eets") returned -1
	[0035.847] lstrlenW (lpString=".cr2") returned 4
	[0035.847] lstrcmpiW (lpString1=".cr2", lpString2="eets") returned -1
	[0035.847] lstrlenW (lpString=".crt") returned 4
	[0035.847] lstrcmpiW (lpString1=".crt", lpString2="eets") returned -1
	[0035.847] lstrlenW (lpString=".crw") returned 4
	[0035.847] lstrcmpiW (lpString1=".crw", lpString2="eets") returned -1
	[0035.847] lstrlenW (lpString=".cs") returned 3
	[0035.847] lstrcmpiW (lpString1=".cs", lpString2="ets") returned -1
	[0035.847] lstrlenW (lpString=".css") returned 4
	[0035.847] lstrcmpiW (lpString1=".css", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".csv") returned 4
	[0035.848] lstrcmpiW (lpString1=".csv", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".cub") returned 4
	[0035.848] lstrcmpiW (lpString1=".cub", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".dae") returned 4
	[0035.848] lstrcmpiW (lpString1=".dae", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".dat") returned 4
	[0035.848] lstrcmpiW (lpString1=".dat", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".db") returned 3
	[0035.848] lstrcmpiW (lpString1=".db", lpString2="ets") returned -1
	[0035.848] lstrlenW (lpString=".dbf") returned 4
	[0035.848] lstrcmpiW (lpString1=".dbf", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".dbx") returned 4
	[0035.848] lstrcmpiW (lpString1=".dbx", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".dc3") returned 4
	[0035.848] lstrcmpiW (lpString1=".dc3", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".dcm") returned 4
	[0035.848] lstrcmpiW (lpString1=".dcm", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".dcr") returned 4
	[0035.848] lstrcmpiW (lpString1=".dcr", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".der") returned 4
	[0035.848] lstrcmpiW (lpString1=".der", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".dib") returned 4
	[0035.848] lstrcmpiW (lpString1=".dib", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".dic") returned 4
	[0035.848] lstrcmpiW (lpString1=".dic", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".dif") returned 4
	[0035.848] lstrcmpiW (lpString1=".dif", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".divx") returned 5
	[0035.848] lstrcmpiW (lpString1=".divx", lpString2="beets") returned -1
	[0035.848] lstrlenW (lpString=".djvu") returned 5
	[0035.848] lstrcmpiW (lpString1=".djvu", lpString2="beets") returned -1
	[0035.848] lstrlenW (lpString=".dng") returned 4
	[0035.848] lstrcmpiW (lpString1=".dng", lpString2="eets") returned -1
	[0035.848] lstrlenW (lpString=".doc") returned 4
	[0035.849] lstrcmpiW (lpString1=".doc", lpString2="eets") returned -1
	[0035.849] lstrlenW (lpString=".docm") returned 5
	[0035.849] lstrcmpiW (lpString1=".docm", lpString2="beets") returned -1
	[0035.849] lstrlenW (lpString=".docx") returned 5
	[0035.849] lstrcmpiW (lpString1=".docx", lpString2="beets") returned -1
	[0035.849] lstrlenW (lpString=".dot") returned 4
	[0035.849] lstrcmpiW (lpString1=".dot", lpString2="eets") returned -1
	[0035.849] lstrlenW (lpString=".dotm") returned 5
	[0035.849] lstrcmpiW (lpString1=".dotm", lpString2="beets") returned -1
	[0035.849] lstrlenW (lpString=".dotx") returned 5
	[0035.849] lstrcmpiW (lpString1=".dotx", lpString2="beets") returned -1
	[0035.849] lstrlenW (lpString=".dpx") returned 4
	[0035.849] lstrcmpiW (lpString1=".dpx", lpString2="eets") returned -1
	[0035.849] lstrlenW (lpString=".dqy") returned 4
	[0035.849] lstrcmpiW (lpString1=".dqy", lpString2="eets") returned -1
	[0035.849] lstrlenW (lpString=".dsn") returned 4
	[0035.849] lstrcmpiW (lpString1=".dsn", lpString2="eets") returned -1
	[0035.849] lstrlenW (lpString=".dt") returned 3
	[0035.849] lstrcmpiW (lpString1=".dt", lpString2="ets") returned -1
	[0035.849] lstrlenW (lpString=".dtd") returned 4
	[0035.849] lstrcmpiW (lpString1=".dtd", lpString2="eets") returned -1
	[0035.849] lstrlenW (lpString=".dwg") returned 4
	[0035.849] lstrcmpiW (lpString1=".dwg", lpString2="eets") returned -1
	[0035.849] lstrlenW (lpString=".dwt") returned 4
	[0035.849] lstrcmpiW (lpString1=".dwt", lpString2="eets") returned -1
	[0035.849] lstrlenW (lpString=".dx") returned 3
	[0035.849] lstrcmpiW (lpString1=".dx", lpString2="ets") returned -1
	[0035.849] lstrlenW (lpString=".dxf") returned 4
	[0035.849] lstrcmpiW (lpString1=".dxf", lpString2="eets") returned -1
	[0035.849] lstrlenW (lpString=".edml") returned 5
	[0035.849] lstrcmpiW (lpString1=".edml", lpString2="beets") returned -1
	[0035.849] lstrlenW (lpString=".efd") returned 4
	[0035.849] lstrcmpiW (lpString1=".efd", lpString2="eets") returned -1
	[0035.849] lstrlenW (lpString=".elf") returned 4
	[0035.850] lstrcmpiW (lpString1=".elf", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".emf") returned 4
	[0035.850] lstrcmpiW (lpString1=".emf", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".emz") returned 4
	[0035.850] lstrcmpiW (lpString1=".emz", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".epf") returned 4
	[0035.850] lstrcmpiW (lpString1=".epf", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".eps") returned 4
	[0035.850] lstrcmpiW (lpString1=".eps", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".epsf") returned 5
	[0035.850] lstrcmpiW (lpString1=".epsf", lpString2="beets") returned -1
	[0035.850] lstrlenW (lpString=".epsp") returned 5
	[0035.850] lstrcmpiW (lpString1=".epsp", lpString2="beets") returned -1
	[0035.850] lstrlenW (lpString=".erf") returned 4
	[0035.850] lstrcmpiW (lpString1=".erf", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".exr") returned 4
	[0035.850] lstrcmpiW (lpString1=".exr", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".f4v") returned 4
	[0035.850] lstrcmpiW (lpString1=".f4v", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".fido") returned 5
	[0035.850] lstrcmpiW (lpString1=".fido", lpString2="beets") returned -1
	[0035.850] lstrlenW (lpString=".flm") returned 4
	[0035.850] lstrcmpiW (lpString1=".flm", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".flv") returned 4
	[0035.850] lstrcmpiW (lpString1=".flv", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".frm") returned 4
	[0035.850] lstrcmpiW (lpString1=".frm", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".fxg") returned 4
	[0035.850] lstrcmpiW (lpString1=".fxg", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".geo") returned 4
	[0035.850] lstrcmpiW (lpString1=".geo", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".gif") returned 4
	[0035.850] lstrcmpiW (lpString1=".gif", lpString2="eets") returned -1
	[0035.850] lstrlenW (lpString=".grs") returned 4
	[0035.850] lstrcmpiW (lpString1=".grs", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".gz") returned 3
	[0035.851] lstrcmpiW (lpString1=".gz", lpString2="ets") returned -1
	[0035.851] lstrlenW (lpString=".h") returned 2
	[0035.851] lstrcmpiW (lpString1=".h", lpString2="ts") returned -1
	[0035.851] lstrlenW (lpString=".hdr") returned 4
	[0035.851] lstrcmpiW (lpString1=".hdr", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".hpp") returned 4
	[0035.851] lstrcmpiW (lpString1=".hpp", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".hta") returned 4
	[0035.851] lstrcmpiW (lpString1=".hta", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".htc") returned 4
	[0035.851] lstrcmpiW (lpString1=".htc", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".htm") returned 4
	[0035.851] lstrcmpiW (lpString1=".htm", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".html") returned 5
	[0035.851] lstrcmpiW (lpString1=".html", lpString2="beets") returned -1
	[0035.851] lstrlenW (lpString=".icb") returned 4
	[0035.851] lstrcmpiW (lpString1=".icb", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".ics") returned 4
	[0035.851] lstrcmpiW (lpString1=".ics", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".iff") returned 4
	[0035.851] lstrcmpiW (lpString1=".iff", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".inc") returned 4
	[0035.851] lstrcmpiW (lpString1=".inc", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".indd") returned 5
	[0035.851] lstrcmpiW (lpString1=".indd", lpString2="beets") returned -1
	[0035.851] lstrlenW (lpString=".ini") returned 4
	[0035.851] lstrcmpiW (lpString1=".ini", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".iqy") returned 4
	[0035.851] lstrcmpiW (lpString1=".iqy", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".j2c") returned 4
	[0035.851] lstrcmpiW (lpString1=".j2c", lpString2="eets") returned -1
	[0035.851] lstrlenW (lpString=".j2k") returned 4
	[0035.851] lstrcmpiW (lpString1=".j2k", lpString2="eets") returned -1
	[0035.852] lstrlenW (lpString=".java") returned 5
	[0035.852] lstrcmpiW (lpString1=".java", lpString2="beets") returned -1
	[0035.852] lstrlenW (lpString=".jp2") returned 4
	[0035.852] lstrcmpiW (lpString1=".jp2", lpString2="eets") returned -1
	[0035.852] lstrlenW (lpString=".jpc") returned 4
	[0035.852] lstrcmpiW (lpString1=".jpc", lpString2="eets") returned -1
	[0035.852] lstrlenW (lpString=".jpe") returned 4
	[0035.852] lstrcmpiW (lpString1=".jpe", lpString2="eets") returned -1
	[0035.852] lstrlenW (lpString=".jpeg") returned 5
	[0035.852] lstrcmpiW (lpString1=".jpeg", lpString2="beets") returned -1
	[0035.852] lstrlenW (lpString=".jpf") returned 4
	[0035.852] lstrcmpiW (lpString1=".jpf", lpString2="eets") returned -1
	[0035.852] lstrlenW (lpString=".jpg") returned 4
	[0035.852] lstrcmpiW (lpString1=".jpg", lpString2="eets") returned -1
	[0035.852] lstrlenW (lpString=".jpx") returned 4
	[0035.852] lstrcmpiW (lpString1=".jpx", lpString2="eets") returned -1
	[0035.852] lstrlenW (lpString=".js") returned 3
	[0035.852] lstrcmpiW (lpString1=".js", lpString2="ets") returned -1
	[0035.852] lstrlenW (lpString=".jsf") returned 4
	[0035.852] lstrcmpiW (lpString1=".jsf", lpString2="eets") returned -1
	[0035.852] lstrlenW (lpString=".json") returned 5
	[0035.852] lstrcmpiW (lpString1=".json", lpString2="beets") returned -1
	[0035.852] lstrlenW (lpString=".jsp") returned 4
	[0035.852] lstrcmpiW (lpString1=".jsp", lpString2="eets") returned -1
	[0035.852] lstrlenW (lpString=".kdc") returned 4
	[0035.852] lstrcmpiW (lpString1=".kdc", lpString2="eets") returned -1
	[0035.852] lstrlenW (lpString=".kmz") returned 4
	[0035.852] lstrcmpiW (lpString1=".kmz", lpString2="eets") returned -1
	[0035.852] lstrlenW (lpString=".kwm") returned 4
	[0035.852] lstrcmpiW (lpString1=".kwm", lpString2="eets") returned -1
	[0035.852] lstrlenW (lpString=".lasso") returned 6
	[0035.852] lstrcmpiW (lpString1=".lasso", lpString2=".beets") returned 1
	[0035.852] lstrlenW (lpString=".lbi") returned 4
	[0035.852] lstrcmpiW (lpString1=".lbi", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".lgf") returned 4
	[0035.853] lstrcmpiW (lpString1=".lgf", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".lgp") returned 4
	[0035.853] lstrcmpiW (lpString1=".lgp", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".log") returned 4
	[0035.853] lstrcmpiW (lpString1=".log", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".m1v") returned 4
	[0035.853] lstrcmpiW (lpString1=".m1v", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".m4a") returned 4
	[0035.853] lstrcmpiW (lpString1=".m4a", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".m4v") returned 4
	[0035.853] lstrcmpiW (lpString1=".m4v", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".max") returned 4
	[0035.853] lstrcmpiW (lpString1=".max", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".md") returned 3
	[0035.853] lstrcmpiW (lpString1=".md", lpString2="ets") returned -1
	[0035.853] lstrlenW (lpString=".mda") returned 4
	[0035.853] lstrcmpiW (lpString1=".mda", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".mdb") returned 4
	[0035.853] lstrcmpiW (lpString1=".mdb", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".mde") returned 4
	[0035.853] lstrcmpiW (lpString1=".mde", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".mdf") returned 4
	[0035.853] lstrcmpiW (lpString1=".mdf", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".mdw") returned 4
	[0035.853] lstrcmpiW (lpString1=".mdw", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".mef") returned 4
	[0035.853] lstrcmpiW (lpString1=".mef", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".mft") returned 4
	[0035.853] lstrcmpiW (lpString1=".mft", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".mfw") returned 4
	[0035.853] lstrcmpiW (lpString1=".mfw", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".mht") returned 4
	[0035.853] lstrcmpiW (lpString1=".mht", lpString2="eets") returned -1
	[0035.853] lstrlenW (lpString=".mhtml") returned 6
	[0035.854] lstrcmpiW (lpString1=".mhtml", lpString2=".beets") returned 1
	[0035.854] lstrlenW (lpString=".mka") returned 4
	[0035.854] lstrcmpiW (lpString1=".mka", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".mkidx") returned 6
	[0035.854] lstrcmpiW (lpString1=".mkidx", lpString2=".beets") returned 1
	[0035.854] lstrlenW (lpString=".mkv") returned 4
	[0035.854] lstrcmpiW (lpString1=".mkv", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".mos") returned 4
	[0035.854] lstrcmpiW (lpString1=".mos", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".mov") returned 4
	[0035.854] lstrcmpiW (lpString1=".mov", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".mp3") returned 4
	[0035.854] lstrcmpiW (lpString1=".mp3", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".mp4") returned 4
	[0035.854] lstrcmpiW (lpString1=".mp4", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".mpeg") returned 5
	[0035.854] lstrcmpiW (lpString1=".mpeg", lpString2="beets") returned -1
	[0035.854] lstrlenW (lpString=".mpg") returned 4
	[0035.854] lstrcmpiW (lpString1=".mpg", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".mpv") returned 4
	[0035.854] lstrcmpiW (lpString1=".mpv", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".mrw") returned 4
	[0035.854] lstrcmpiW (lpString1=".mrw", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".msg") returned 4
	[0035.854] lstrcmpiW (lpString1=".msg", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".mxl") returned 4
	[0035.854] lstrcmpiW (lpString1=".mxl", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".myd") returned 4
	[0035.854] lstrcmpiW (lpString1=".myd", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".myi") returned 4
	[0035.854] lstrcmpiW (lpString1=".myi", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".nef") returned 4
	[0035.854] lstrcmpiW (lpString1=".nef", lpString2="eets") returned -1
	[0035.854] lstrlenW (lpString=".nrw") returned 4
	[0035.855] lstrcmpiW (lpString1=".nrw", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".obj") returned 4
	[0035.855] lstrcmpiW (lpString1=".obj", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".odb") returned 4
	[0035.855] lstrcmpiW (lpString1=".odb", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".odc") returned 4
	[0035.855] lstrcmpiW (lpString1=".odc", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".odm") returned 4
	[0035.855] lstrcmpiW (lpString1=".odm", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".odp") returned 4
	[0035.855] lstrcmpiW (lpString1=".odp", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".ods") returned 4
	[0035.855] lstrcmpiW (lpString1=".ods", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".oft") returned 4
	[0035.855] lstrcmpiW (lpString1=".oft", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".one") returned 4
	[0035.855] lstrcmpiW (lpString1=".one", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".onepkg") returned 7
	[0035.855] lstrcmpiW (lpString1=".onepkg", lpString2="].beets") returned -1
	[0035.855] lstrlenW (lpString=".onetoc2") returned 8
	[0035.855] lstrcmpiW (lpString1=".onetoc2", lpString2="i].beets") returned -1
	[0035.855] lstrlenW (lpString=".opt") returned 4
	[0035.855] lstrcmpiW (lpString1=".opt", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".oqy") returned 4
	[0035.855] lstrcmpiW (lpString1=".oqy", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".orf") returned 4
	[0035.855] lstrcmpiW (lpString1=".orf", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".p12") returned 4
	[0035.855] lstrcmpiW (lpString1=".p12", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".p7b") returned 4
	[0035.855] lstrcmpiW (lpString1=".p7b", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".p7c") returned 4
	[0035.855] lstrcmpiW (lpString1=".p7c", lpString2="eets") returned -1
	[0035.855] lstrlenW (lpString=".pam") returned 4
	[0035.856] lstrcmpiW (lpString1=".pam", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".pbm") returned 4
	[0035.856] lstrcmpiW (lpString1=".pbm", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".pct") returned 4
	[0035.856] lstrcmpiW (lpString1=".pct", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".pcx") returned 4
	[0035.856] lstrcmpiW (lpString1=".pcx", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".pdd") returned 4
	[0035.856] lstrcmpiW (lpString1=".pdd", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".pdf") returned 4
	[0035.856] lstrcmpiW (lpString1=".pdf", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".pdp") returned 4
	[0035.856] lstrcmpiW (lpString1=".pdp", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".pef") returned 4
	[0035.856] lstrcmpiW (lpString1=".pef", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".pem") returned 4
	[0035.856] lstrcmpiW (lpString1=".pem", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".pff") returned 4
	[0035.856] lstrcmpiW (lpString1=".pff", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".pfm") returned 4
	[0035.856] lstrcmpiW (lpString1=".pfm", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".pfx") returned 4
	[0035.856] lstrcmpiW (lpString1=".pfx", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".pgm") returned 4
	[0035.856] lstrcmpiW (lpString1=".pgm", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".php") returned 4
	[0035.856] lstrcmpiW (lpString1=".php", lpString2="eets") returned -1
	[0035.856] lstrlenW (lpString=".php3") returned 5
	[0035.856] lstrcmpiW (lpString1=".php3", lpString2="beets") returned -1
	[0035.856] lstrlenW (lpString=".php4") returned 5
	[0035.856] lstrcmpiW (lpString1=".php4", lpString2="beets") returned -1
	[0035.856] lstrlenW (lpString=".php5") returned 5
	[0035.856] lstrcmpiW (lpString1=".php5", lpString2="beets") returned -1
	[0035.857] lstrlenW (lpString=".phtml") returned 6
	[0035.857] lstrcmpiW (lpString1=".phtml", lpString2=".beets") returned 1
	[0035.857] lstrlenW (lpString=".pict") returned 5
	[0035.857] lstrcmpiW (lpString1=".pict", lpString2="beets") returned -1
	[0035.857] lstrlenW (lpString=".pl") returned 3
	[0035.857] lstrcmpiW (lpString1=".pl", lpString2="ets") returned -1
	[0035.857] lstrlenW (lpString=".pls") returned 4
	[0035.857] lstrcmpiW (lpString1=".pls", lpString2="eets") returned -1
	[0035.857] lstrlenW (lpString=".pm") returned 3
	[0035.857] lstrcmpiW (lpString1=".pm", lpString2="ets") returned -1
	[0035.857] lstrlenW (lpString=".png") returned 4
	[0035.857] lstrcmpiW (lpString1=".png", lpString2="eets") returned -1
	[0035.857] lstrlenW (lpString=".pnm") returned 4
	[0035.857] lstrcmpiW (lpString1=".pnm", lpString2="eets") returned -1
	[0035.857] lstrlenW (lpString=".pot") returned 4
	[0035.857] lstrcmpiW (lpString1=".pot", lpString2="eets") returned -1
	[0035.857] lstrlenW (lpString=".potm") returned 5
	[0035.857] lstrcmpiW (lpString1=".potm", lpString2="beets") returned -1
	[0035.857] lstrlenW (lpString=".potx") returned 5
	[0035.857] lstrcmpiW (lpString1=".potx", lpString2="beets") returned -1
	[0035.857] lstrlenW (lpString=".ppa") returned 4
	[0035.857] lstrcmpiW (lpString1=".ppa", lpString2="eets") returned -1
	[0035.857] lstrlenW (lpString=".ppam") returned 5
	[0035.857] lstrcmpiW (lpString1=".ppam", lpString2="beets") returned -1
	[0035.857] lstrlenW (lpString=".ppm") returned 4
	[0035.857] lstrcmpiW (lpString1=".ppm", lpString2="eets") returned -1
	[0035.857] lstrlenW (lpString=".pps") returned 4
	[0035.857] lstrcmpiW (lpString1=".pps", lpString2="eets") returned -1
	[0035.857] lstrlenW (lpString=".ppsm") returned 5
	[0035.857] lstrcmpiW (lpString1=".ppsm", lpString2="beets") returned -1
	[0035.857] lstrlenW (lpString=".ppt") returned 4
	[0035.857] lstrcmpiW (lpString1=".ppt", lpString2="eets") returned -1
	[0035.857] lstrlenW (lpString=".pptm") returned 5
	[0035.857] lstrcmpiW (lpString1=".pptm", lpString2="beets") returned -1
	[0035.858] lstrlenW (lpString=".pptx") returned 5
	[0035.858] lstrcmpiW (lpString1=".pptx", lpString2="beets") returned -1
	[0035.858] lstrlenW (lpString=".prn") returned 4
	[0035.858] lstrcmpiW (lpString1=".prn", lpString2="eets") returned -1
	[0035.858] lstrlenW (lpString=".ps") returned 3
	[0035.858] lstrcmpiW (lpString1=".ps", lpString2="ets") returned -1
	[0035.858] lstrlenW (lpString=".psb") returned 4
	[0035.858] lstrcmpiW (lpString1=".psb", lpString2="eets") returned -1
	[0035.858] lstrlenW (lpString=".psd") returned 4
	[0035.858] lstrcmpiW (lpString1=".psd", lpString2="eets") returned -1
	[0035.858] lstrlenW (lpString=".pst") returned 4
	[0035.858] lstrcmpiW (lpString1=".pst", lpString2="eets") returned -1
	[0035.858] lstrlenW (lpString=".ptx") returned 4
	[0035.858] lstrcmpiW (lpString1=".ptx", lpString2="eets") returned -1
	[0035.858] lstrlenW (lpString=".pub") returned 4
	[0035.858] lstrcmpiW (lpString1=".pub", lpString2="eets") returned -1
	[0035.858] lstrlenW (lpString=".pwm") returned 4
	[0035.858] lstrcmpiW (lpString1=".pwm", lpString2="eets") returned -1

Thread:
	id = 23
	os_tid = 0xa70


Thread:
	id = 24
	os_tid = 0xa78


Process:
	id = "2"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x4f05e000"
	os_pid = "0xa04"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x9f0"
	cmd_line = "\"C:\\Windows\\system32\\cmd.exe\""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "64"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 3
	os_tid = 0xa08

	[0034.329] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x27ff10 | out: lpSystemTimeAsFileTime=0x27ff10*(dwLowDateTime=0xda6f1db0, dwHighDateTime=0x1d52be5)) 
	[0034.329] GetCurrentProcessId () returned 0xa04
	[0034.329] GetCurrentThreadId () returned 0xa08
	[0034.329] GetTickCount () returned 0x18ed6
	[0034.329] QueryPerformanceCounter (in: lpPerformanceCount=0x27ff18 | out: lpPerformanceCount=0x27ff18*=15448835256) returned 1
	[0034.330] GetModuleHandleW (lpModuleName=0x0) returned 0x4a110000
	[0034.330] __set_app_type (_Type=0x1) 
	[0034.330] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a137810) returned 0x0
	[0034.330] __getmainargs (in: _Argc=0x4a15a608, _Argv=0x4a15a618, _Env=0x4a15a610, _DoWildCard=0, _StartInfo=0x4a13e0f4 | out: _Argc=0x4a15a608, _Argv=0x4a15a618, _Env=0x4a15a610) returned 0
	[0034.331] GetCurrentThreadId () returned 0xa08
	[0034.331] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa08) returned 0x3c
	[0034.331] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76e30000
	[0034.331] GetProcAddress (hModule=0x76e30000, lpProcName="SetThreadUILanguage") returned 0x76e46d40
	[0034.331] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409
	[0034.332] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0034.332] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x27fea8 | out: phkResult=0x27fea8*=0x0) returned 0x2
	[0034.332] VirtualQuery (in: lpAddress=0x27fe90, lpBuffer=0x27fe10, dwLength=0x30 | out: lpBuffer=0x27fe10*(BaseAddress=0x27f000, AllocationBase=0x180000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0034.332] VirtualQuery (in: lpAddress=0x180000, lpBuffer=0x27fe10, dwLength=0x30 | out: lpBuffer=0x27fe10*(BaseAddress=0x180000, AllocationBase=0x180000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0034.332] VirtualQuery (in: lpAddress=0x181000, lpBuffer=0x27fe10, dwLength=0x30 | out: lpBuffer=0x27fe10*(BaseAddress=0x181000, AllocationBase=0x180000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0034.332] VirtualQuery (in: lpAddress=0x184000, lpBuffer=0x27fe10, dwLength=0x30 | out: lpBuffer=0x27fe10*(BaseAddress=0x184000, AllocationBase=0x180000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0034.332] VirtualQuery (in: lpAddress=0x280000, lpBuffer=0x27fe10, dwLength=0x30 | out: lpBuffer=0x27fe10*(BaseAddress=0x280000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x50000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30
	[0034.332] GetConsoleOutputCP () returned 0x1b5
	[0034.332] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a14bfe0 | out: lpCPInfo=0x4a14bfe0) returned 1
	[0034.332] SetConsoleCtrlHandler (HandlerRoutine=0x4a133184, Add=1) returned 1
	[0034.332] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.332] SetConsoleMode (hConsoleHandle=0xf8, dwMode=0x0) returned 0
	[0034.333] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.333] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x4a13e194 | out: lpMode=0x4a13e194) returned 0
	[0034.333] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.333] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x4a13e198 | out: lpMode=0x4a13e198) returned 0
	[0034.333] GetEnvironmentStringsW () returned 0x2e8a60*
	[0034.333] GetProcessHeap () returned 0x2d0000
	[0034.333] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xa7c) returned 0x2e94f0
	[0034.333] FreeEnvironmentStringsW (penv=0x2e8a60) returned 1
	[0034.333] GetProcessHeap () returned 0x2d0000
	[0034.333] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x8) returned 0x2e88e0
	[0034.333] GetEnvironmentStringsW () returned 0x2e8a60*
	[0034.333] GetProcessHeap () returned 0x2d0000
	[0034.333] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xa7c) returned 0x2e9f80
	[0034.334] FreeEnvironmentStringsW (penv=0x2e8a60) returned 1
	[0034.334] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x27ed68 | out: phkResult=0x27ed68*=0x44) returned 0x0
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x0, lpData=0x27ed80*=0x18, lpcbData=0x27ed64*=0x1000) returned 0x2
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x4, lpData=0x27ed80*=0x1, lpcbData=0x27ed64*=0x4) returned 0x0
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x0, lpData=0x27ed80*=0x1, lpcbData=0x27ed64*=0x1000) returned 0x2
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x4, lpData=0x27ed80*=0x0, lpcbData=0x27ed64*=0x4) returned 0x0
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x4, lpData=0x27ed80*=0x40, lpcbData=0x27ed64*=0x4) returned 0x0
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x4, lpData=0x27ed80*=0x40, lpcbData=0x27ed64*=0x4) returned 0x0
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x0, lpData=0x27ed80*=0x40, lpcbData=0x27ed64*=0x1000) returned 0x2
	[0034.334] RegCloseKey (hKey=0x44) returned 0x0
	[0034.334] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x27ed68 | out: phkResult=0x27ed68*=0x44) returned 0x0
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x0, lpData=0x27ed80*=0x40, lpcbData=0x27ed64*=0x1000) returned 0x2
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x4, lpData=0x27ed80*=0x1, lpcbData=0x27ed64*=0x4) returned 0x0
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x0, lpData=0x27ed80*=0x1, lpcbData=0x27ed64*=0x1000) returned 0x2
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x4, lpData=0x27ed80*=0x0, lpcbData=0x27ed64*=0x4) returned 0x0
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x4, lpData=0x27ed80*=0x9, lpcbData=0x27ed64*=0x4) returned 0x0
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x4, lpData=0x27ed80*=0x9, lpcbData=0x27ed64*=0x4) returned 0x0
	[0034.334] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x27ed60, lpData=0x27ed80, lpcbData=0x27ed64*=0x1000 | out: lpType=0x27ed60*=0x0, lpData=0x27ed80*=0x9, lpcbData=0x27ed64*=0x1000) returned 0x2
	[0034.334] RegCloseKey (hKey=0x44) returned 0x0
	[0034.335] time (in: timer=0x0 | out: timer=0x0) returned 0x5d130c54
	[0034.335] srand (_Seed=0x5d130c54) 
	[0034.335] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\""
	[0034.335] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\""
	[0034.335] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a14c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0034.335] GetProcessHeap () returned 0x2d0000
	[0034.335] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x218) returned 0x2eaa10
	[0034.335] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2eaa20, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0034.335] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0034.335] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.335] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0034.335] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0034.335] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0034.335] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0034.335] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0034.335] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0034.335] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0034.335] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0034.335] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0034.335] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0034.336] GetProcessHeap () returned 0x2d0000
	[0034.336] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e94f0 | out: hHeap=0x2d0000) returned 1
	[0034.336] GetEnvironmentStringsW () returned 0x2e8a60*
	[0034.336] GetProcessHeap () returned 0x2d0000
	[0034.336] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xa94) returned 0x2eac30
	[0034.336] FreeEnvironmentStringsW (penv=0x2e8a60) returned 1
	[0034.336] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0034.336] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0034.336] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0034.336] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0034.336] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0034.336] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0034.336] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0034.336] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0034.336] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0034.336] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0034.336] GetProcessHeap () returned 0x2d0000
	[0034.336] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x5c) returned 0x2eb6d0
	[0034.336] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x27fb70 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0034.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x27fb70, lpFilePart=0x27fb50 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x27fb50*="Desktop") returned 0x25
	[0034.336] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0034.336] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x27f880 | out: lpFindFileData=0x27f880*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x53000152, cFileName="Users", cAlternateFileName="")) returned 0x2eb740
	[0034.337] FindClose (in: hFindFile=0x2eb740 | out: hFindFile=0x2eb740) returned 1
	[0034.337] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x27f880 | out: lpFindFileData=0x27f880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x53000152, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x2eb740
	[0034.337] FindClose (in: hFindFile=0x2eb740 | out: hFindFile=0x2eb740) returned 1
	[0034.337] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0034.337] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x27f880 | out: lpFindFileData=0x27f880*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd40a84f0, ftLastAccessTime.dwHighDateTime=0x1d52be5, ftLastWriteTime.dwLowDateTime=0xd40a84f0, ftLastWriteTime.dwHighDateTime=0x1d52be5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x53000152, cFileName="Desktop", cAlternateFileName="")) returned 0x2eb740
	[0034.337] FindClose (in: hFindFile=0x2eb740 | out: hFindFile=0x2eb740) returned 1
	[0034.337] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0034.337] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0034.337] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0034.337] GetProcessHeap () returned 0x2d0000
	[0034.337] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eac30 | out: hHeap=0x2d0000) returned 1
	[0034.337] GetEnvironmentStringsW () returned 0x2eb740*
	[0034.337] GetProcessHeap () returned 0x2d0000
	[0034.337] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xae8) returned 0x2ec230
	[0034.337] FreeEnvironmentStringsW (penv=0x2eb740) returned 1
	[0034.337] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a14c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0034.337] GetProcessHeap () returned 0x2d0000
	[0034.337] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eb6d0 | out: hHeap=0x2d0000) returned 1
	[0034.338] GetProcessHeap () returned 0x2d0000
	[0034.338] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x4016) returned 0x2ecd20
	[0034.338] GetProcessHeap () returned 0x2d0000
	[0034.338] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2ecd20 | out: hHeap=0x2d0000) returned 1
	[0034.338] GetConsoleOutputCP () returned 0x1b5
	[0034.338] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a14bfe0 | out: lpCPInfo=0x4a14bfe0) returned 1
	[0034.338] GetUserDefaultLCID () returned 0x409
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a147b50, cchData=8 | out: lpLCData=":") returned 2
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x27fc80, cchData=128 | out: lpLCData="0") returned 2
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x27fc80, cchData=128 | out: lpLCData="0") returned 2
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x27fc80, cchData=128 | out: lpLCData="1") returned 2
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a15a740, cchData=8 | out: lpLCData="/") returned 2
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a15a4a0, cchData=32 | out: lpLCData="Mon") returned 4
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a15a460, cchData=32 | out: lpLCData="Tue") returned 4
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a15a420, cchData=32 | out: lpLCData="Wed") returned 4
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a15a3e0, cchData=32 | out: lpLCData="Thu") returned 4
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a15a3a0, cchData=32 | out: lpLCData="Fri") returned 4
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a15a360, cchData=32 | out: lpLCData="Sat") returned 4
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a15a700, cchData=32 | out: lpLCData="Sun") returned 4
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a147b40, cchData=8 | out: lpLCData=".") returned 2
	[0034.339] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a15a4e0, cchData=8 | out: lpLCData=",") returned 2
	[0034.339] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0034.340] GetProcessHeap () returned 0x2d0000
	[0034.340] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x20c) returned 0x2e95c0
	[0034.340] GetConsoleTitleW (in: lpConsoleTitle=0x2e95c0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0034.341] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.341] GetFileType (hFile=0xf8) returned 0x3
	[0034.341] BrandingFormatString () returned 0x2e97e0
	[0034.353] GetVersion () returned 0x1db10106
	[0034.353] _vsnwprintf (in: _Buffer=0x27fdf0, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x27fd88 | out: _Buffer="6.1.7601") returned 8
	[0034.353] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.353] GetFileType (hFile=0xf8) returned 0x3
	[0034.353] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x4a156340, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e
	[0034.353] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x4a156340, nSize=0x2000, Arguments=0x27fd90 | out: lpBuffer="Microsoft Windows [Version 6.1.7601]") returned 0x24
	[0034.353] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 6.1.7601]", cchWideChar=-1, lpMultiByteStr=0x4a14c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 6.1.7601]", lpUsedDefaultChar=0x0) returned 37
	[0034.353] WriteFile (in: hFile=0xf8, lpBuffer=0x4a14c320*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x27fd18, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesWritten=0x27fd18*=0x24, lpOverlapped=0x0) returned 1
	[0034.353] _vsnwprintf (in: _Buffer=0x4a156340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x27fdb8 | out: _Buffer="\r\n") returned 2
	[0034.353] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.353] GetFileType (hFile=0xf8) returned 0x3
	[0034.353] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x4a14c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0034.353] WriteFile (in: hFile=0xf8, lpBuffer=0x4a14c320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x27fd88, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesWritten=0x27fd88*=0x2, lpOverlapped=0x0) returned 1
	[0034.353] _vsnwprintf (in: _Buffer=0x4a156340, _BufferCount=0x1fff, _Format="%s", _ArgList=0x27fdb8 | out: _Buffer="Copyright (c) 2009 Microsoft Corporation.  All rights reserved.") returned 63
	[0034.353] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.354] GetFileType (hFile=0xf8) returned 0x3
	[0034.354] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Copyright (c) 2009 Microsoft Corporation.  All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x4a14c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Copyright (c) 2009 Microsoft Corporation.  All rights reserved.", lpUsedDefaultChar=0x0) returned 64
	[0034.354] WriteFile (in: hFile=0xf8, lpBuffer=0x4a14c320*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x27fd88, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesWritten=0x27fd88*=0x3f, lpOverlapped=0x0) returned 1
	[0034.354] _vsnwprintf (in: _Buffer=0x4a156340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x27fdb8 | out: _Buffer="\r\n") returned 2
	[0034.354] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.354] GetFileType (hFile=0xf8) returned 0x3
	[0034.354] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x4a14c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0034.354] WriteFile (in: hFile=0xf8, lpBuffer=0x4a14c320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x27fd88, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesWritten=0x27fd88*=0x2, lpOverlapped=0x0) returned 1
	[0034.354] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76e30000
	[0034.354] GetProcAddress (hModule=0x76e30000, lpProcName="CopyFileExW") returned 0x76e423d0
	[0034.354] GetProcAddress (hModule=0x76e30000, lpProcName="IsDebuggerPresent") returned 0x76e38290
	[0034.354] GetProcAddress (hModule=0x76e30000, lpProcName="SetConsoleInputExeNameW") returned 0x76e417e0
	[0034.354] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.354] GetFileType (hFile=0xec) returned 0x3
	[0034.354] _setmode (_FileHandle=0, _Mode=32768) returned 16384
	[0034.354] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x27fbe0 | out: TokenHandle=0x27fbe0*=0x0) returned 0xc000007c
	[0034.354] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x27fbe0 | out: TokenHandle=0x27fbe0*=0x50) returned 0x0
	[0034.354] NtQueryInformationToken (in: TokenHandle=0x50, TokenInformationClass=0x12, TokenInformation=0x27fbf0, TokenInformationLength=0x4, ReturnLength=0x27fbf8 | out: TokenInformation=0x27fbf0, ReturnLength=0x27fbf8) returned 0x0
	[0034.355] NtQueryInformationToken (in: TokenHandle=0x50, TokenInformationClass=0x1a, TokenInformation=0x27fbf8, TokenInformationLength=0x4, ReturnLength=0x27fbf0 | out: TokenInformation=0x27fbf8, ReturnLength=0x27fbf0) returned 0x0
	[0034.355] NtClose (Handle=0x50) returned 0x0
	[0034.355] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x27fbc0, nSize=0x0, Arguments=0x27fbc8 | out: lpBuffer="\x97e0\x2e") returned 0xf
	[0034.355] GetProcessHeap () returned 0x2d0000
	[0034.355] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x218) returned 0x2d1ab0
	[0034.355] GetConsoleTitleW (in: lpConsoleTitle=0x27fc10, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0034.355] wcsstr (_Str="C:\\Windows\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0
	[0034.355] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 1
	[0034.356] GetProcessHeap () returned 0x2d0000
	[0034.356] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2d1ab0 | out: hHeap=0x2d0000) returned 1
	[0034.356] LocalFree (hMem=0x2e97e0) returned 0x0
	[0034.356] GetProcessHeap () returned 0x2d0000
	[0034.356] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eaa10 | out: hHeap=0x2d0000) returned 1
	[0034.356] _vsnwprintf (in: _Buffer=0x4a156340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x27f8f8 | out: _Buffer="\r\n") returned 2
	[0034.356] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.356] GetFileType (hFile=0xf8) returned 0x3
	[0034.356] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.356] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x4a14c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0034.356] WriteFile (in: hFile=0xf8, lpBuffer=0x4a14c320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x27f8c8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesWritten=0x27f8c8*=0x2, lpOverlapped=0x0) returned 1
	[0034.356] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
	[0034.356] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a14c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0034.356] _vsnwprintf (in: _Buffer=0x4a13eb60, _BufferCount=0x3fe, _Format="%s", _ArgList=0x27f908 | out: _Buffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37
	[0034.357] _vsnwprintf (in: _Buffer=0x4a13ebaa, _BufferCount=0x3d9, _Format="%c", _ArgList=0x27f908 | out: _Buffer=">") returned 1
	[0034.357] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.357] GetFileType (hFile=0xf8) returned 0x3
	[0034.357] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x4a14c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop>", lpUsedDefaultChar=0x0) returned 39
	[0034.357] WriteFile (in: hFile=0xf8, lpBuffer=0x4a14c320*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x27f8f8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesWritten=0x27f8f8*=0x26, lpOverlapped=0x0) returned 1
	[0034.357] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.357] GetFileType (hFile=0xec) returned 0x3
	[0034.357] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.357] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.357] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.357] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e320, cchWideChar=1 | out: lpWideCharStr="m") returned 1
	[0034.358] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.358] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.358] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.358] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e322, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0034.358] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.358] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.358] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.358] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e324, cchWideChar=1 | out: lpWideCharStr="d") returned 1
	[0034.358] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.358] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.358] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.358] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e326, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0034.358] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.358] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.358] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.358] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e328, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0034.358] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.358] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.358] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.358] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e32a, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0034.358] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.358] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.359] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.359] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e32c, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0034.359] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.359] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.359] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.359] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e32e, cchWideChar=1 | out: lpWideCharStr="n") returned 1
	[0034.359] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.359] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.359] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.359] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e330, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0034.359] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.359] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.359] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.359] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e332, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0034.359] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.359] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.359] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.360] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e334, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0034.360] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.360] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.360] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.360] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e336, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0034.360] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.360] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.360] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.360] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e338, cchWideChar=1 | out: lpWideCharStr="s") returned 1
	[0034.360] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.360] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.360] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.360] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e33a, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0034.360] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.360] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.360] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.360] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e33c, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0034.360] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.360] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.360] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.360] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e33e, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0034.360] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.360] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.360] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.360] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e340, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0034.360] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.360] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.361] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.361] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e342, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0034.361] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.361] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.361] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.361] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e344, cchWideChar=1 | out: lpWideCharStr="=") returned 1
	[0034.361] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.361] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.361] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.361] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e346, cchWideChar=1 | out: lpWideCharStr="1") returned 1
	[0034.361] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.361] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.361] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.361] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e348, cchWideChar=1 | out: lpWideCharStr="2") returned 1
	[0034.361] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.361] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.361] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.361] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e34a, cchWideChar=1 | out: lpWideCharStr="5") returned 1
	[0034.361] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.361] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.361] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.361] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e34c, cchWideChar=1 | out: lpWideCharStr="1") returned 1
	[0034.361] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.361] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.361] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.361] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e34e, cchWideChar=1 | out: lpWideCharStr="\n") returned 1
	[0034.362] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.362] GetFileType (hFile=0xec) returned 0x3
	[0034.362] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.362] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.362] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.362] GetFileType (hFile=0xf8) returned 0x3
	[0034.362] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="mode con cp select=1251\n", cchWideChar=-1, lpMultiByteStr=0x4a14c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mode con cp select=1251\n", lpUsedDefaultChar=0x0) returned 25
	[0034.362] WriteFile (in: hFile=0xf8, lpBuffer=0x4a14c320*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x27fbd8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesWritten=0x27fbd8*=0x18, lpOverlapped=0x0) returned 1
	[0034.362] GetProcessHeap () returned 0x2d0000
	[0034.362] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x4012) returned 0x2ecd20
	[0034.362] GetProcessHeap () returned 0x2d0000
	[0034.362] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2ecd20 | out: hHeap=0x2d0000) returned 1
	[0034.363] _wcsicmp (_String1="mode", _String2=")") returned 68
	[0034.363] _wcsicmp (_String1="FOR", _String2="mode") returned -7
	[0034.363] _wcsicmp (_String1="FOR/?", _String2="mode") returned -7
	[0034.363] _wcsicmp (_String1="IF", _String2="mode") returned -4
	[0034.363] _wcsicmp (_String1="IF/?", _String2="mode") returned -4
	[0034.363] _wcsicmp (_String1="REM", _String2="mode") returned 5
	[0034.363] _wcsicmp (_String1="REM/?", _String2="mode") returned 5
	[0034.363] GetProcessHeap () returned 0x2d0000
	[0034.363] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xb0) returned 0x2e97e0
	[0034.363] GetProcessHeap () returned 0x2d0000
	[0034.363] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x1a) returned 0x2e4610
	[0034.363] GetProcessHeap () returned 0x2d0000
	[0034.364] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x38) returned 0x2e6510
	[0034.364] GetConsoleOutputCP () returned 0x1b5
	[0034.364] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a14bfe0 | out: lpCPInfo=0x4a14bfe0) returned 1
	[0034.364] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409
	[0034.365] GetConsoleTitleW (in: lpConsoleTitle=0x27fb90, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a
	[0034.365] _wcsicmp (_String1="mode", _String2="DIR") returned 9
	[0034.365] _wcsicmp (_String1="mode", _String2="ERASE") returned 8
	[0034.365] _wcsicmp (_String1="mode", _String2="DEL") returned 9
	[0034.365] _wcsicmp (_String1="mode", _String2="TYPE") returned -7
	[0034.365] _wcsicmp (_String1="mode", _String2="COPY") returned 10
	[0034.365] _wcsicmp (_String1="mode", _String2="CD") returned 10
	[0034.365] _wcsicmp (_String1="mode", _String2="CHDIR") returned 10
	[0034.365] _wcsicmp (_String1="mode", _String2="RENAME") returned -5
	[0034.365] _wcsicmp (_String1="mode", _String2="REN") returned -5
	[0034.365] _wcsicmp (_String1="mode", _String2="ECHO") returned 8
	[0034.365] _wcsicmp (_String1="mode", _String2="SET") returned -6
	[0034.365] _wcsicmp (_String1="mode", _String2="PAUSE") returned -3
	[0034.365] _wcsicmp (_String1="mode", _String2="DATE") returned 9
	[0034.365] _wcsicmp (_String1="mode", _String2="TIME") returned -7
	[0034.365] _wcsicmp (_String1="mode", _String2="PROMPT") returned -3
	[0034.365] _wcsicmp (_String1="mode", _String2="MD") returned 11
	[0034.365] _wcsicmp (_String1="mode", _String2="MKDIR") returned 4
	[0034.365] _wcsicmp (_String1="mode", _String2="RD") returned -5
	[0034.365] _wcsicmp (_String1="mode", _String2="RMDIR") returned -5
	[0034.365] _wcsicmp (_String1="mode", _String2="PATH") returned -3
	[0034.365] _wcsicmp (_String1="mode", _String2="GOTO") returned 6
	[0034.365] _wcsicmp (_String1="mode", _String2="SHIFT") returned -6
	[0034.365] _wcsicmp (_String1="mode", _String2="CLS") returned 10
	[0034.365] _wcsicmp (_String1="mode", _String2="CALL") returned 10
	[0034.366] _wcsicmp (_String1="mode", _String2="VERIFY") returned -9
	[0034.366] _wcsicmp (_String1="mode", _String2="VER") returned -9
	[0034.366] _wcsicmp (_String1="mode", _String2="VOL") returned -9
	[0034.366] _wcsicmp (_String1="mode", _String2="EXIT") returned 8
	[0034.366] _wcsicmp (_String1="mode", _String2="SETLOCAL") returned -6
	[0034.366] _wcsicmp (_String1="mode", _String2="ENDLOCAL") returned 8
	[0034.366] _wcsicmp (_String1="mode", _String2="TITLE") returned -7
	[0034.366] _wcsicmp (_String1="mode", _String2="START") returned -6
	[0034.366] _wcsicmp (_String1="mode", _String2="DPATH") returned 9
	[0034.366] _wcsicmp (_String1="mode", _String2="KEYS") returned 2
	[0034.366] _wcsicmp (_String1="mode", _String2="MOVE") returned -18
	[0034.366] _wcsicmp (_String1="mode", _String2="PUSHD") returned -3
	[0034.366] _wcsicmp (_String1="mode", _String2="POPD") returned -3
	[0034.366] _wcsicmp (_String1="mode", _String2="ASSOC") returned 12
	[0034.366] _wcsicmp (_String1="mode", _String2="FTYPE") returned 7
	[0034.366] _wcsicmp (_String1="mode", _String2="BREAK") returned 11
	[0034.366] _wcsicmp (_String1="mode", _String2="COLOR") returned 10
	[0034.366] _wcsicmp (_String1="mode", _String2="MKLINK") returned 4
	[0034.366] _wcsicmp (_String1="mode", _String2="DIR") returned 9
	[0034.366] _wcsicmp (_String1="mode", _String2="ERASE") returned 8
	[0034.366] _wcsicmp (_String1="mode", _String2="DEL") returned 9
	[0034.366] _wcsicmp (_String1="mode", _String2="TYPE") returned -7
	[0034.366] _wcsicmp (_String1="mode", _String2="COPY") returned 10
	[0034.366] _wcsicmp (_String1="mode", _String2="CD") returned 10
	[0034.366] _wcsicmp (_String1="mode", _String2="CHDIR") returned 10
	[0034.366] _wcsicmp (_String1="mode", _String2="RENAME") returned -5
	[0034.366] _wcsicmp (_String1="mode", _String2="REN") returned -5
	[0034.366] _wcsicmp (_String1="mode", _String2="ECHO") returned 8
	[0034.366] _wcsicmp (_String1="mode", _String2="SET") returned -6
	[0034.366] _wcsicmp (_String1="mode", _String2="PAUSE") returned -3
	[0034.366] _wcsicmp (_String1="mode", _String2="DATE") returned 9
	[0034.366] _wcsicmp (_String1="mode", _String2="TIME") returned -7
	[0034.366] _wcsicmp (_String1="mode", _String2="PROMPT") returned -3
	[0034.366] _wcsicmp (_String1="mode", _String2="MD") returned 11
	[0034.366] _wcsicmp (_String1="mode", _String2="MKDIR") returned 4
	[0034.366] _wcsicmp (_String1="mode", _String2="RD") returned -5
	[0034.366] _wcsicmp (_String1="mode", _String2="RMDIR") returned -5
	[0034.367] _wcsicmp (_String1="mode", _String2="PATH") returned -3
	[0034.367] _wcsicmp (_String1="mode", _String2="GOTO") returned 6
	[0034.367] _wcsicmp (_String1="mode", _String2="SHIFT") returned -6
	[0034.367] _wcsicmp (_String1="mode", _String2="CLS") returned 10
	[0034.367] _wcsicmp (_String1="mode", _String2="CALL") returned 10
	[0034.367] _wcsicmp (_String1="mode", _String2="VERIFY") returned -9
	[0034.367] _wcsicmp (_String1="mode", _String2="VER") returned -9
	[0034.367] _wcsicmp (_String1="mode", _String2="VOL") returned -9
	[0034.367] _wcsicmp (_String1="mode", _String2="EXIT") returned 8
	[0034.367] _wcsicmp (_String1="mode", _String2="SETLOCAL") returned -6
	[0034.367] _wcsicmp (_String1="mode", _String2="ENDLOCAL") returned 8
	[0034.367] _wcsicmp (_String1="mode", _String2="TITLE") returned -7
	[0034.367] _wcsicmp (_String1="mode", _String2="START") returned -6
	[0034.367] _wcsicmp (_String1="mode", _String2="DPATH") returned 9
	[0034.367] _wcsicmp (_String1="mode", _String2="KEYS") returned 2
	[0034.367] _wcsicmp (_String1="mode", _String2="MOVE") returned -18
	[0034.367] _wcsicmp (_String1="mode", _String2="PUSHD") returned -3
	[0034.367] _wcsicmp (_String1="mode", _String2="POPD") returned -3
	[0034.367] _wcsicmp (_String1="mode", _String2="ASSOC") returned 12
	[0034.367] _wcsicmp (_String1="mode", _String2="FTYPE") returned 7
	[0034.367] _wcsicmp (_String1="mode", _String2="BREAK") returned 11
	[0034.367] _wcsicmp (_String1="mode", _String2="COLOR") returned 10
	[0034.367] _wcsicmp (_String1="mode", _String2="MKLINK") returned 4
	[0034.367] _wcsicmp (_String1="mode", _String2="FOR") returned 7
	[0034.367] _wcsicmp (_String1="mode", _String2="IF") returned 4
	[0034.367] _wcsicmp (_String1="mode", _String2="REM") returned -5
	[0034.367] GetProcessHeap () returned 0x2d0000
	[0034.367] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x218) returned 0x2d1ab0
	[0034.367] GetProcessHeap () returned 0x2d0000
	[0034.367] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x42) returned 0x2e98a0
	[0034.368] _wcsnicmp (_String1="mode", _String2="cmd ", _MaxCount=0x4) returned 10
	[0034.368] GetProcessHeap () returned 0x2d0000
	[0034.368] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x420) returned 0x2e9a80
	[0034.368] SetErrorMode (uMode=0x0) returned 0x0
	[0034.368] SetErrorMode (uMode=0x1) returned 0x0
	[0034.368] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x2e9a90, lpFilePart=0x27f420 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x27f420*="Desktop") returned 0x25
	[0034.368] SetErrorMode (uMode=0x0) returned 0x1
	[0034.368] GetProcessHeap () returned 0x2d0000
	[0034.368] RtlReAllocateHeap (Heap=0x2d0000, Flags=0x0, Ptr=0x2e9a80, Size=0x66) returned 0x2e9a80
	[0034.368] GetProcessHeap () returned 0x2d0000
	[0034.368] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2e9a80) returned 0x66
	[0034.368] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0034.368] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0034.368] GetProcessHeap () returned 0x2d0000
	[0034.368] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x128) returned 0x2d1cd0
	[0034.368] GetProcessHeap () returned 0x2d0000
	[0034.368] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x240) returned 0x2e9b00
	[0034.374] GetProcessHeap () returned 0x2d0000
	[0034.374] RtlReAllocateHeap (Heap=0x2d0000, Flags=0x0, Ptr=0x2e9b00, Size=0x12a) returned 0x2e9b00
	[0034.374] GetProcessHeap () returned 0x2d0000
	[0034.374] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2e9b00) returned 0x12a
	[0034.374] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.374] GetProcessHeap () returned 0x2d0000
	[0034.374] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xe8) returned 0x2e5b70
	[0034.374] GetProcessHeap () returned 0x2d0000
	[0034.374] RtlReAllocateHeap (Heap=0x2d0000, Flags=0x0, Ptr=0x2e5b70, Size=0x7e) returned 0x2e5b70
	[0034.374] GetProcessHeap () returned 0x2d0000
	[0034.374] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2e5b70) returned 0x7e
	[0034.378] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0034.378] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mode.*", fInfoLevelId=0x1, lpFindFileData=0x27f190, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27f190) returned 0xffffffffffffffff
	[0034.378] GetLastError () returned 0x2
	[0034.378] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mode", fInfoLevelId=0x1, lpFindFileData=0x27f190, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27f190) returned 0xffffffffffffffff
	[0034.378] GetLastError () returned 0x2
	[0034.378] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0034.378] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\mode.*", fInfoLevelId=0x1, lpFindFileData=0x27f190, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27f190) returned 0x2e5c00
	[0034.378] GetProcessHeap () returned 0x2d0000
	[0034.378] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x28) returned 0x2e4640
	[0034.378] FindClose (in: hFindFile=0x2e5c00 | out: hFindFile=0x2e5c00) returned 1
	[0034.378] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\mode.COM", fInfoLevelId=0x1, lpFindFileData=0x27f190, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27f190) returned 0x2e5c00
	[0034.379] GetProcessHeap () returned 0x2d0000
	[0034.379] RtlReAllocateHeap (Heap=0x2d0000, Flags=0x0, Ptr=0x2e4640, Size=0x8) returned 0x2e98f0
	[0034.379] FindClose (in: hFindFile=0x2e5c00 | out: hFindFile=0x2e5c00) returned 1
	[0034.379] _wcsicmp (_String1=".COM", _String2=".BAT") returned 1
	[0034.379] _wcsicmp (_String1=".COM", _String2=".CMD") returned 2
	[0034.379] GetConsoleTitleW (in: lpConsoleTitle=0x27f6e0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a
	[0034.379] GetProcessHeap () returned 0x2d0000
	[0034.379] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x21c) returned 0x2e9c40
	[0034.379] GetConsoleTitleW (in: lpConsoleTitle=0x2e9c50, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a
	[0034.379] GetProcessHeap () returned 0x2d0000
	[0034.379] RtlReAllocateHeap (Heap=0x2d0000, Flags=0x0, Ptr=0x2e9c40, Size=0xa8) returned 0x2e9c40
	[0034.379] GetProcessHeap () returned 0x2d0000
	[0034.379] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2e9c40) returned 0xa8
	[0034.379] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe - mode  con cp select=1251") returned 1
	[0034.380] GetProcessHeap () returned 0x2d0000
	[0034.380] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e9c40 | out: hHeap=0x2d0000) returned 1
	[0034.380] InitializeProcThreadAttributeList (in: lpAttributeList=0x27f498, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x27f458 | out: lpAttributeList=0x27f498, lpSize=0x27f458) returned 1
	[0034.380] UpdateProcThreadAttribute (in: lpAttributeList=0x27f498, dwFlags=0x0, Attribute=0x60001, lpValue=0x27f448, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x27f498, lpPreviousValue=0x0) returned 1
	[0034.380] GetStartupInfoW (in: lpStartupInfo=0x27f5b0 | out: lpStartupInfo=0x27f5b0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xec, hStdOutput=0xf8, hStdError=0xf8)) 
	[0034.380] GetProcessHeap () returned 0x2d0000
	[0034.380] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x20) returned 0x2e4640
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0034.380] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0034.381] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0034.381] GetProcessHeap () returned 0x2d0000
	[0034.381] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e4640 | out: hHeap=0x2d0000) returned 1
	[0034.381] GetProcessHeap () returned 0x2d0000
	[0034.381] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x12) returned 0x2e8900
	[0034.381] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\mode.com", lpCommandLine="mode  con cp select=1251", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x27f4d0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="mode  con cp select=1251", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x27f480 | out: lpCommandLine="mode  con cp select=1251", lpProcessInformation=0x27f480*(hProcess=0x54, hThread=0x50, dwProcessId=0xa2c, dwThreadId=0xa30)) returned 1
	[0034.388] CloseHandle (hObject=0x50) returned 1
	[0034.388] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0034.388] GetProcessHeap () returned 0x2d0000
	[0034.388] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2ec230 | out: hHeap=0x2d0000) returned 1
	[0034.388] GetEnvironmentStringsW () returned 0x2eaa10*
	[0034.388] GetProcessHeap () returned 0x2d0000
	[0034.388] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xae8) returned 0x2eb500
	[0034.388] FreeEnvironmentStringsW (penv=0x2eaa10) returned 1
	[0034.388] LoadLibraryW (lpLibFileName="NTDLL.DLL") returned 0x76f50000
	[0034.389] GetProcAddress (hModule=0x76f50000, lpProcName="NtQueryInformationProcess") returned 0x76fa14a0
	[0034.389] NtQueryInformationProcess (in: ProcessHandle=0x54, ProcessInformationClass=0x0, ProcessInformation=0x27ed88, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed88, ReturnLength=0x0) returned 0x0
	[0034.389] ReadProcessMemory (in: hProcess=0x54, lpBaseAddress=0x7fffffdc000, lpBuffer=0x27edc0, nSize=0x380, lpNumberOfBytesRead=0x27ed80 | out: lpBuffer=0x27edc0*, lpNumberOfBytesRead=0x27ed80*=0x380) returned 1
	[0034.389] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
	[0034.798] GetExitCodeProcess (in: hProcess=0x54, lpExitCode=0x27f3c8 | out: lpExitCode=0x27f3c8*=0x0) returned 1
	[0034.798] CloseHandle (hObject=0x54) returned 1
	[0034.798] _vsnwprintf (in: _Buffer=0x27f638, _BufferCount=0x13, _Format="%08X", _ArgList=0x27f3d8 | out: _Buffer="00000000") returned 8
	[0034.798] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1
	[0034.798] GetProcessHeap () returned 0x2d0000
	[0034.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eb500 | out: hHeap=0x2d0000) returned 1
	[0034.798] GetEnvironmentStringsW () returned 0x2eaa10*
	[0034.798] GetProcessHeap () returned 0x2d0000
	[0034.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xb0e) returned 0x2eeb10
	[0034.798] FreeEnvironmentStringsW (penv=0x2eaa10) returned 1
	[0034.798] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0034.798] GetProcessHeap () returned 0x2d0000
	[0034.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eeb10 | out: hHeap=0x2d0000) returned 1
	[0034.798] GetEnvironmentStringsW () returned 0x2eaa10*
	[0034.798] GetProcessHeap () returned 0x2d0000
	[0034.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xb0e) returned 0x2eeb10
	[0034.798] FreeEnvironmentStringsW (penv=0x2eaa10) returned 1
	[0034.798] GetProcessHeap () returned 0x2d0000
	[0034.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e8900 | out: hHeap=0x2d0000) returned 1
	[0034.798] DeleteProcThreadAttributeList (in: lpAttributeList=0x27f498 | out: lpAttributeList=0x27f498) 
	[0034.847] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 1
	[0034.848] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.848] SetConsoleMode (hConsoleHandle=0xf8, dwMode=0x0) returned 0
	[0034.848] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.848] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x4a13e194 | out: lpMode=0x4a13e194) returned 0
	[0034.848] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.848] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x4a13e198 | out: lpMode=0x4a13e198) returned 0
	[0034.849] GetConsoleOutputCP () returned 0x4e3
	[0034.849] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x4a14bfe0 | out: lpCPInfo=0x4a14bfe0) returned 1
	[0034.849] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409
	[0034.849] GetProcessHeap () returned 0x2d0000
	[0034.849] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e5b70 | out: hHeap=0x2d0000) returned 1
	[0034.849] GetProcessHeap () returned 0x2d0000
	[0034.849] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e9b00 | out: hHeap=0x2d0000) returned 1
	[0034.849] GetProcessHeap () returned 0x2d0000
	[0034.849] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2d1cd0 | out: hHeap=0x2d0000) returned 1
	[0034.849] GetProcessHeap () returned 0x2d0000
	[0034.849] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e9a80 | out: hHeap=0x2d0000) returned 1
	[0034.849] GetProcessHeap () returned 0x2d0000
	[0034.849] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e98a0 | out: hHeap=0x2d0000) returned 1
	[0034.849] GetProcessHeap () returned 0x2d0000
	[0034.850] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2d1ab0 | out: hHeap=0x2d0000) returned 1
	[0034.850] GetProcessHeap () returned 0x2d0000
	[0034.850] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e6510 | out: hHeap=0x2d0000) returned 1
	[0034.850] GetProcessHeap () returned 0x2d0000
	[0034.850] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e4610 | out: hHeap=0x2d0000) returned 1
	[0034.850] GetProcessHeap () returned 0x2d0000
	[0034.850] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e97e0 | out: hHeap=0x2d0000) returned 1
	[0034.850] _vsnwprintf (in: _Buffer=0x4a156340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x27f8f8 | out: _Buffer="\r\n") returned 2
	[0034.850] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.850] GetFileType (hFile=0xf8) returned 0x3
	[0034.850] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.850] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x4a14c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0034.850] WriteFile (in: hFile=0xf8, lpBuffer=0x4a14c320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x27f8c8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesWritten=0x27f8c8*=0x2, lpOverlapped=0x0) returned 1
	[0034.850] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
	[0034.850] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a14c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0034.850] _vsnwprintf (in: _Buffer=0x4a13eb60, _BufferCount=0x3fe, _Format="%s", _ArgList=0x27f908 | out: _Buffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37
	[0034.850] _vsnwprintf (in: _Buffer=0x4a13ebaa, _BufferCount=0x3d9, _Format="%c", _ArgList=0x27f908 | out: _Buffer=">") returned 1
	[0034.850] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.850] GetFileType (hFile=0xf8) returned 0x3
	[0034.850] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.850] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x4a14c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop>", lpUsedDefaultChar=0x0) returned 39
	[0034.850] WriteFile (in: hFile=0xf8, lpBuffer=0x4a14c320*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x27f8f8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesWritten=0x27f8f8*=0x26, lpOverlapped=0x0) returned 1
	[0034.850] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.850] GetFileType (hFile=0xec) returned 0x3
	[0034.851] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.851] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.851] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.851] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e320, cchWideChar=1 | out: lpWideCharStr="vode con cp select=1251\n") returned 1
	[0034.851] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.851] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.851] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.851] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e322, cchWideChar=1 | out: lpWideCharStr="sde con cp select=1251\n") returned 1
	[0034.851] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.851] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.851] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.851] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e324, cchWideChar=1 | out: lpWideCharStr="se con cp select=1251\n") returned 1
	[0034.851] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.851] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.851] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.851] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e326, cchWideChar=1 | out: lpWideCharStr="a con cp select=1251\n") returned 1
	[0034.851] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.851] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.851] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.851] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e328, cchWideChar=1 | out: lpWideCharStr="dcon cp select=1251\n") returned 1
	[0034.851] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.851] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.851] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.851] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e32a, cchWideChar=1 | out: lpWideCharStr="mon cp select=1251\n") returned 1
	[0034.851] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.851] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.852] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.852] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e32c, cchWideChar=1 | out: lpWideCharStr="in cp select=1251\n") returned 1
	[0034.852] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.852] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.852] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.852] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e32e, cchWideChar=1 | out: lpWideCharStr="n cp select=1251\n") returned 1
	[0034.852] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.852] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.852] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.852] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e330, cchWideChar=1 | out: lpWideCharStr=" cp select=1251\n") returned 1
	[0034.852] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.852] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.852] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.852] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e332, cchWideChar=1 | out: lpWideCharStr="dp select=1251\n") returned 1
	[0034.852] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.852] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.852] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.852] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e334, cchWideChar=1 | out: lpWideCharStr="e select=1251\n") returned 1
	[0034.852] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.852] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.852] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.852] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e336, cchWideChar=1 | out: lpWideCharStr="lselect=1251\n") returned 1
	[0034.852] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.852] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.852] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.852] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e338, cchWideChar=1 | out: lpWideCharStr="eelect=1251\n") returned 1
	[0034.852] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.853] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.853] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.853] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e33a, cchWideChar=1 | out: lpWideCharStr="tlect=1251\n") returned 1
	[0034.853] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.853] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.853] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.853] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e33c, cchWideChar=1 | out: lpWideCharStr="eect=1251\n") returned 1
	[0034.853] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.853] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.853] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.853] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e33e, cchWideChar=1 | out: lpWideCharStr=" ct=1251\n") returned 1
	[0034.853] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.853] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.853] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.853] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e340, cchWideChar=1 | out: lpWideCharStr="st=1251\n") returned 1
	[0034.853] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.853] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.853] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.853] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e342, cchWideChar=1 | out: lpWideCharStr="h=1251\n") returned 1
	[0034.853] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.853] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.853] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.853] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e344, cchWideChar=1 | out: lpWideCharStr="a1251\n") returned 1
	[0034.853] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.853] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.853] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.854] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e346, cchWideChar=1 | out: lpWideCharStr="d251\n") returned 1
	[0034.854] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.854] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.854] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.854] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e348, cchWideChar=1 | out: lpWideCharStr="o51\n") returned 1
	[0034.854] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.854] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.854] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.854] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e34a, cchWideChar=1 | out: lpWideCharStr="w1\n") returned 1
	[0034.854] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.854] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.854] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.854] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e34c, cchWideChar=1 | out: lpWideCharStr="s\n") returned 1
	[0034.854] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.854] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.854] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.854] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e34e, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0034.854] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.854] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.854] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.854] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e350, cchWideChar=1 | out: lpWideCharStr="/") returned 1
	[0034.854] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.854] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.854] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.854] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e352, cchWideChar=1 | out: lpWideCharStr="a") returned 1
	[0034.854] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.854] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.854] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.855] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e354, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0034.855] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.855] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.855] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.855] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e356, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0034.855] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.855] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.855] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.855] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e358, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0034.855] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.855] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.855] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.855] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e35a, cchWideChar=1 | out: lpWideCharStr="/") returned 1
	[0034.855] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.855] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.855] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.855] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e35c, cchWideChar=1 | out: lpWideCharStr="q") returned 1
	[0034.855] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.855] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.855] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.855] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e35e, cchWideChar=1 | out: lpWideCharStr="u") returned 1
	[0034.855] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.855] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.855] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.855] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e360, cchWideChar=1 | out: lpWideCharStr="i") returned 1
	[0034.855] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.855] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.856] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.856] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e362, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0034.856] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.856] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.856] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.856] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e364, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0034.856] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.856] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.856] ReadFile (in: hFile=0xec, lpBuffer=0x4a14c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x27fbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesRead=0x27fbf8*=0x1, lpOverlapped=0x0) returned 1
	[0034.856] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4a14c320, cbMultiByte=1, lpWideCharStr=0x4a14e366, cchWideChar=1 | out: lpWideCharStr="\n") returned 1
	[0034.856] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.856] GetFileType (hFile=0xec) returned 0x3
	[0034.856] _get_osfhandle (_FileHandle=0) returned 0xec
	[0034.856] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0034.856] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.856] GetFileType (hFile=0xf8) returned 0x3
	[0034.856] _get_osfhandle (_FileHandle=1) returned 0xf8
	[0034.856] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="vssadmin delete shadows /all /quiet\n", cchWideChar=-1, lpMultiByteStr=0x4a14c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssadmin delete shadows /all /quiet\n", lpUsedDefaultChar=0x0) returned 37
	[0034.856] WriteFile (in: hFile=0xf8, lpBuffer=0x4a14c320*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x27fbd8, lpOverlapped=0x0 | out: lpBuffer=0x4a14c320*, lpNumberOfBytesWritten=0x27fbd8*=0x24, lpOverlapped=0x0) returned 1
	[0034.856] GetProcessHeap () returned 0x2d0000
	[0034.856] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x4012) returned 0x2ef630
	[0034.857] GetProcessHeap () returned 0x2d0000
	[0034.857] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2ef630 | out: hHeap=0x2d0000) returned 1
	[0034.857] GetProcessHeap () returned 0x2d0000
	[0034.857] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xb0) returned 0x2e97e0
	[0034.857] GetProcessHeap () returned 0x2d0000
	[0034.857] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x22) returned 0x2e4610
	[0034.857] GetProcessHeap () returned 0x2d0000
	[0034.857] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x48) returned 0x2eaa90
	[0034.858] GetConsoleOutputCP () returned 0x4e3
	[0034.858] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x4a14bfe0 | out: lpCPInfo=0x4a14bfe0) returned 1
	[0034.858] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409
	[0034.858] GetConsoleTitleW (in: lpConsoleTitle=0x27fb90, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a
	[0034.858] GetProcessHeap () returned 0x2d0000
	[0034.858] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x218) returned 0x2e9910
	[0034.858] GetProcessHeap () returned 0x2d0000
	[0034.858] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x5a) returned 0x2e9b30
	[0034.858] GetProcessHeap () returned 0x2d0000
	[0034.858] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x420) returned 0x2e9090
	[0034.858] SetErrorMode (uMode=0x0) returned 0x0
	[0034.859] SetErrorMode (uMode=0x1) returned 0x0
	[0034.859] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x2e90a0, lpFilePart=0x27f420 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x27f420*="Desktop") returned 0x25
	[0034.859] SetErrorMode (uMode=0x0) returned 0x1
	[0034.859] GetProcessHeap () returned 0x2d0000
	[0034.859] RtlReAllocateHeap (Heap=0x2d0000, Flags=0x0, Ptr=0x2e9090, Size=0x6e) returned 0x2e9090
	[0034.859] GetProcessHeap () returned 0x2d0000
	[0034.859] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2e9090) returned 0x6e
	[0034.859] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0034.859] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0034.859] GetProcessHeap () returned 0x2d0000
	[0034.859] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x128) returned 0x2e5b70
	[0034.859] GetProcessHeap () returned 0x2d0000
	[0034.859] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x240) returned 0x2d1ab0
	[0034.859] GetProcessHeap () returned 0x2d0000
	[0034.859] RtlReAllocateHeap (Heap=0x2d0000, Flags=0x0, Ptr=0x2d1ab0, Size=0x12a) returned 0x2d1ab0
	[0034.859] GetProcessHeap () returned 0x2d0000
	[0034.859] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2d1ab0) returned 0x12a
	[0034.859] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.859] GetProcessHeap () returned 0x2d0000
	[0034.859] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xe8) returned 0x2e9db0
	[0034.859] GetProcessHeap () returned 0x2d0000
	[0034.859] RtlReAllocateHeap (Heap=0x2d0000, Flags=0x0, Ptr=0x2e9db0, Size=0x7e) returned 0x2e9db0
	[0034.859] GetProcessHeap () returned 0x2d0000
	[0034.859] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2e9db0) returned 0x7e
	[0034.859] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0034.859] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0x27f190, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27f190) returned 0xffffffffffffffff
	[0034.859] GetLastError () returned 0x2
	[0034.860] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vssadmin", fInfoLevelId=0x1, lpFindFileData=0x27f190, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27f190) returned 0xffffffffffffffff
	[0034.860] GetLastError () returned 0x2
	[0034.860] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0034.860] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0x27f190, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27f190) returned 0x2e9ba0
	[0034.860] FindClose (in: hFindFile=0x2e9ba0 | out: hFindFile=0x2e9ba0) returned 1
	[0034.860] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.COM", fInfoLevelId=0x1, lpFindFileData=0x27f190, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27f190) returned 0xffffffffffffffff
	[0034.860] GetLastError () returned 0x2
	[0034.860] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.EXE", fInfoLevelId=0x1, lpFindFileData=0x27f190, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27f190) returned 0x2e9ba0
	[0034.860] FindClose (in: hFindFile=0x2e9ba0 | out: hFindFile=0x2e9ba0) returned 1
	[0034.860] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0034.860] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0034.860] GetConsoleTitleW (in: lpConsoleTitle=0x27f6e0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a
	[0034.861] GetProcessHeap () returned 0x2d0000
	[0034.861] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x21c) returned 0x2e9110
	[0034.861] GetConsoleTitleW (in: lpConsoleTitle=0x2e9120, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a
	[0034.861] GetProcessHeap () returned 0x2d0000
	[0034.861] RtlReAllocateHeap (Heap=0x2d0000, Flags=0x0, Ptr=0x2e9110, Size=0xc0) returned 0x2e9110
	[0034.861] GetProcessHeap () returned 0x2d0000
	[0034.861] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2e9110) returned 0xc0
	[0034.861] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe - vssadmin  delete shadows /all /quiet") returned 1
	[0034.862] GetProcessHeap () returned 0x2d0000
	[0034.862] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e9110 | out: hHeap=0x2d0000) returned 1
	[0034.862] InitializeProcThreadAttributeList (in: lpAttributeList=0x27f498, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x27f458 | out: lpAttributeList=0x27f498, lpSize=0x27f458) returned 1
	[0034.862] UpdateProcThreadAttribute (in: lpAttributeList=0x27f498, dwFlags=0x0, Attribute=0x60001, lpValue=0x27f448, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x27f498, lpPreviousValue=0x0) returned 1
	[0034.862] GetStartupInfoW (in: lpStartupInfo=0x27f5b0 | out: lpStartupInfo=0x27f5b0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xec, hStdOutput=0xf8, hStdError=0xf8)) 
	[0034.862] GetProcessHeap () returned 0x2d0000
	[0034.862] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x20) returned 0x2e4640
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.862] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0034.863] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0034.863] GetProcessHeap () returned 0x2d0000
	[0034.863] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e4640 | out: hHeap=0x2d0000) returned 1
	[0034.863] GetProcessHeap () returned 0x2d0000
	[0034.863] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x12) returned 0x2e8900
	[0034.863] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="vssadmin  delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x27f4d0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin  delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x27f480 | out: lpCommandLine="vssadmin  delete shadows /all /quiet", lpProcessInformation=0x27f480*(hProcess=0x50, hThread=0x54, dwProcessId=0xa60, dwThreadId=0xa64)) returned 1
	[0034.870] CloseHandle (hObject=0x54) returned 1
	[0034.870] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0034.870] GetProcessHeap () returned 0x2d0000
	[0034.870] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eeb10 | out: hHeap=0x2d0000) returned 1
	[0034.870] GetEnvironmentStringsW () returned 0x2eeb10*
	[0034.870] GetProcessHeap () returned 0x2d0000
	[0034.870] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xb0e) returned 0x2ef630
	[0034.870] FreeEnvironmentStringsW (penv=0x2eeb10) returned 1
	[0034.870] NtQueryInformationProcess (in: ProcessHandle=0x50, ProcessInformationClass=0x0, ProcessInformation=0x27ed88, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed88, ReturnLength=0x0) returned 0x0
	[0034.870] ReadProcessMemory (in: hProcess=0x50, lpBaseAddress=0x7fffffde000, lpBuffer=0x27edc0, nSize=0x380, lpNumberOfBytesRead=0x27ed80 | out: lpBuffer=0x27edc0*, lpNumberOfBytesRead=0x27ed80*=0x380) returned 1
	[0034.870] WaitForSingleObject (hHandle=0x50, dwMilliseconds=0xffffffff) 

Process:
	id = "3"
	image_name = "mode.com"
	filename = "c:\\windows\\system32\\mode.com"
	page_root = "0x4f903000"
	os_pid = "0xa2c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0xa04"
	cmd_line = "mode  con cp select=1251"
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "64"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 8
	os_tid = 0xa30


Process:
	id = "4"
	image_name = "vssadmin.exe"
	filename = "c:\\windows\\system32\\vssadmin.exe"
	page_root = "0x4fe14000"
	os_pid = "0xa60"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0xa04"
	cmd_line = "vssadmin  delete shadows /all /quiet"
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "64"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 20
	os_tid = 0xa64


Thread:
	id = 21
	os_tid = 0xa68


Thread:
	id = 22
	os_tid = 0xa6c


Thread:
	id = 25
	os_tid = 0xaf0


Thread:
	id = 26
	os_tid = 0xaf4


Process:
	id = "5"
	image_name = "vssvc.exe"
	filename = "c:\\windows\\system32\\vssvc.exe"
	page_root = "0x4be77000"
	os_pid = "0xaf8"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b7e890"
	monitor_reason = "rpc_server"
	parent_id = "4"
	os_parent_pid = "0xa60"
	cmd_line = "C:\\Windows\\system32\\vssvc.exe"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "64"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0007f9d0" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 27
	os_tid = 0xb18


Thread:
	id = 28
	os_tid = 0xb0c


Thread:
	id = 29
	os_tid = 0xb08

	[0043.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xf3dc30 | out: lpSystemTimeAsFileTime=0xf3dc30*(dwLowDateTime=0xdec6bfd0, dwHighDateTime=0x1d52be5)) 
	[0043.262] GetCurrentProcessId () returned 0xaf8
	[0043.262] GetCurrentThreadId () returned 0xb08
	[0043.262] GetTickCount () returned 0x1ab4b
	[0043.262] QueryPerformanceCounter (in: lpPerformanceCount=0xf3dc38 | out: lpPerformanceCount=0xf3dc38*=16342156295) returned 1
	[0043.262] malloc (_Size=0x100) returned 0x418e80

Thread:
	id = 30
	os_tid = 0xb04


Thread:
	id = 31
	os_tid = 0xb00


Thread:
	id = 32
	os_tid = 0xafc


Thread:
	id = 33
	os_tid = 0xb1c


Thread:
	id = 48
	os_tid = 0xb38


Thread:
	id = 55
	os_tid = 0xbe4


Thread:
	id = 78
	os_tid = 0x11c


Process:
	id = "6"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x15f04000"
	os_pid = "0x3f8"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "5"
	os_parent_pid = "0xaf8"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Local Service"
	bitness = "64"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dc17" [0xc000000f], "LOCAL" [0x7]


Thread:
	id = 34
	os_tid = 0xad0


Thread:
	id = 35
	os_tid = 0x76c


Thread:
	id = 36
	os_tid = 0x758


Thread:
	id = 37
	os_tid = 0x74c


Thread:
	id = 38
	os_tid = 0x72c


Thread:
	id = 39
	os_tid = 0x71c


Thread:
	id = 40
	os_tid = 0x718


Thread:
	id = 41
	os_tid = 0x638


Thread:
	id = 42
	os_tid = 0x154


Thread:
	id = 43
	os_tid = 0x150


Thread:
	id = 44
	os_tid = 0x128


Thread:
	id = 45
	os_tid = 0x12c


Thread:
	id = 46
	os_tid = 0x120


Thread:
	id = 47
	os_tid = 0x3fc


Thread:
	id = 56
	os_tid = 0x8b8


Thread:
	id = 76
	os_tid = 0x924


Process:
	id = "7"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x47a7c000"
	os_pid = "0xb20"
	os_integrity_level = "0x4000"
	os_privileges = "0x60814080"
	monitor_reason = "rpc_server"
	parent_id = "5"
	os_parent_pid = "0xaf8"
	cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "64"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0008043f" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 49
	os_tid = 0xb3c


Thread:
	id = 50
	os_tid = 0xb34


Thread:
	id = 51
	os_tid = 0xb30


Thread:
	id = 52
	os_tid = 0xb2c


Thread:
	id = 53
	os_tid = 0xb28


Thread:
	id = 54
	os_tid = 0xb24


Thread:
	id = 79
	os_tid = 0x58c


Process:
	id = "8"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x910c000"
	os_pid = "0x124"
	os_integrity_level = "0x4000"
	os_privileges = "0x60a00000"
	monitor_reason = "rpc_server"
	parent_id = "6"
	os_parent_pid = "0x3f8"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Network Service"
	bitness = "64"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e1c4" [0xc000000f], "LOCAL" [0x7]


Thread:
	id = 57
	os_tid = 0xad4


Thread:
	id = 58
	os_tid = 0x968


Thread:
	id = 59
	os_tid = 0x310


Thread:
	id = 60
	os_tid = 0x754


Thread:
	id = 61
	os_tid = 0x704


Thread:
	id = 62
	os_tid = 0x6e0


Thread:
	id = 63
	os_tid = 0x6b0


Thread:
	id = 64
	os_tid = 0x698


Thread:
	id = 65
	os_tid = 0x678


Thread:
	id = 66
	os_tid = 0x630


Thread:
	id = 67
	os_tid = 0x610


Thread:
	id = 68
	os_tid = 0x14c


Thread:
	id = 69
	os_tid = 0x140


Thread:
	id = 70
	os_tid = 0x158


Thread:
	id = 71
	os_tid = 0x294


Thread:
	id = 72
	os_tid = 0x218


Thread:
	id = 73
	os_tid = 0x230


Thread:
	id = 74
	os_tid = 0x21c


Thread:
	id = 75
	os_tid = 0x1c4


Thread:
	id = 77
	os_tid = 0x930


Thread:
	id = 80
	os_tid = 0x938


Process:
	id = "9"
	image_name = "demo.exe"
	filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\demo.exe"
	page_root = "0x75aba000"
	os_pid = "0x578"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "autostart"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\demo.exe\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e013" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 81
	os_tid = 0x57c

	[0267.943] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0xa3ed1e00, dwHighDateTime=0x1d52bd5)) 
	[0267.943] GetCurrentThreadId () returned 0x57c
	[0267.943] GetCurrentProcessId () returned 0x578
	[0267.943] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=7018684786) returned 1
	[0267.943] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\demo.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x777efd35, hStdError=0x77857daf)) 
	[0267.944] GetProcessHeap () returned 0x5350000
	[0267.945] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76520000
	[0267.945] GetProcAddress (hModule=0x76520000, lpProcName="FlsAlloc") returned 0x76534f2b
	[0267.945] GetProcAddress (hModule=0x76520000, lpProcName="FlsFree") returned 0x7653359f
	[0267.945] GetProcAddress (hModule=0x76520000, lpProcName="FlsGetValue") returned 0x76531252
	[0267.945] GetProcAddress (hModule=0x76520000, lpProcName="FlsSetValue") returned 0x76534208
	[0267.945] GetProcAddress (hModule=0x76520000, lpProcName="InitializeCriticalSectionEx") returned 0x76534d28
	[0267.945] GetProcAddress (hModule=0x76520000, lpProcName="CreateEventExW") returned 0x765b410b
	[0267.945] GetProcAddress (hModule=0x76520000, lpProcName="CreateSemaphoreExW") returned 0x765b4195
	[0267.945] GetProcAddress (hModule=0x76520000, lpProcName="SetThreadStackGuarantee") returned 0x7653d31f
	[0267.945] GetProcAddress (hModule=0x76520000, lpProcName="CreateThreadpoolTimer") returned 0x7654ee7e
	[0267.945] GetProcAddress (hModule=0x76520000, lpProcName="SetThreadpoolTimer") returned 0x7781441c
	[0267.945] GetProcAddress (hModule=0x76520000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7783c50e
	[0267.945] GetProcAddress (hModule=0x76520000, lpProcName="CloseThreadpoolTimer") returned 0x7783c381
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="CreateThreadpoolWait") returned 0x7654f088
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="SetThreadpoolWait") returned 0x778205d7
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="CloseThreadpoolWait") returned 0x7783ca24
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="FlushProcessWriteBuffers") returned 0x777f0b8c
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x778afde8
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="GetCurrentProcessorNumber") returned 0x77841e1d
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="GetLogicalProcessorInformation") returned 0x765b4761
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="CreateSymbolicLinkW") returned 0x765acd11
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="SetDefaultDllDirectories") returned 0x0
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="EnumSystemLocalesEx") returned 0x765b424f
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="CompareStringEx") returned 0x765b46b1
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="GetDateFormatEx") returned 0x765c6676
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="GetLocaleInfoEx") returned 0x765b4751
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="GetTimeFormatEx") returned 0x765c65f1
	[0267.946] GetProcAddress (hModule=0x76520000, lpProcName="GetUserDefaultLocaleName") returned 0x765b47c1
	[0267.947] GetProcAddress (hModule=0x76520000, lpProcName="IsValidLocaleName") returned 0x765b47e1
	[0267.947] GetProcAddress (hModule=0x76520000, lpProcName="LCMapStringEx") returned 0x765b47f1
	[0267.947] GetProcAddress (hModule=0x76520000, lpProcName="GetCurrentPackageId") returned 0x0
	[0267.947] GetProcAddress (hModule=0x76520000, lpProcName="GetTickCount64") returned 0x7654eee0
	[0267.947] GetProcAddress (hModule=0x76520000, lpProcName="GetFileInformationByHandleExW") returned 0x0
	[0267.947] GetProcAddress (hModule=0x76520000, lpProcName="SetFileInformationByHandleW") returned 0x0
	[0267.949] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x3bc) returned 0x5363f08
	[0267.950] GetCurrentThreadId () returned 0x57c
	[0267.950] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x18) returned 0x5360f30
	[0267.950] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x8, Size=0x800) returned 0x53642d0
	[0267.950] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\demo.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x406cd0, hStdOutput=0x60941e, hStdError=0x0)) 
	[0267.950] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0267.950] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0267.950] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0267.950] GetCommandLineA () returned="\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\demo.exe\" "
	[0267.950] GetEnvironmentStringsW () returned 0x5364ad8*
	[0267.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1409
	[0267.950] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x581) returned 0x53655e8
	[0267.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x53655e8, cbMultiByte=1409, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1409
	[0267.950] FreeEnvironmentStringsW (penv=0x5364ad8) returned 1
	[0267.950] GetLastError () returned 0x7f
	[0267.950] SetLastError (dwErrCode=0x7f) 
	[0267.950] GetLastError () returned 0x7f
	[0267.950] SetLastError (dwErrCode=0x7f) 
	[0267.950] GetLastError () returned 0x7f
	[0267.950] SetLastError (dwErrCode=0x7f) 
	[0267.950] GetACP () returned 0x4e4
	[0267.950] RtlAllocateHeap (HeapHandle=0x5350000, Flags=0x0, Size=0x220) returned 0x5365b78
	[0267.950] GetLastError () returned 0x7f
	[0267.950] SetLastError (dwErrCode=0x7f) 
	[0267.950] IsValidCodePage (CodePage=0x4e4) returned 1
	[0267.950] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1

Process:
	id = "10"
	image_name = "demo.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\demo.exe"
	page_root = "0x755ed000"
	os_pid = "0x580"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "autostart"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\demo.exe\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e013" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 82
	os_tid = 0x584